6779574450f7c900284e03f28888879ad21551b8ccfeb2d99e837cd6e21a784e | Triage

Sharing

General

Target

6779574450f7c900284e03f28888879ad21551b8ccfeb2d99e837cd6e21a784eN
Size

86KB
Sample

240918-kyr54ssdqb
MD5

51baea136181a5f32e0ccd54b0a08ca0
SHA1

7226c4cf37fd46dcd6fb195433328aa9c33fcc5e
SHA256

6779574450f7c900284e03f28888879ad21551b8ccfeb2d99e837cd6e21a784e
SHA512

63eaca13fb956de14e3ea514c13d8129e420bcb795b2ea177874a2db46b536725c08da2e749364a72cc28580e6300c241f16c0d2860f62726d4f5f7d21a38d1b
SSDEEP

768:W7BlpDpARFbhAMMgU47BlpDpARFbhAMMgUI:W7ZDpApAMMgU47ZDpApAMMgUI

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  6779574450f7c900284e03f28888879ad21551b8ccfeb2d99e837cd6e21a784eN
- Size
  
  86KB
- MD5
  
  51baea136181a5f32e0ccd54b0a08ca0
- SHA1
  
  7226c4cf37fd46dcd6fb195433328aa9c33fcc5e
- SHA256
  
  6779574450f7c900284e03f28888879ad21551b8ccfeb2d99e837cd6e21a784e
- SHA512
  
  63eaca13fb956de14e3ea514c13d8129e420bcb795b2ea177874a2db46b536725c08da2e749364a72cc28580e6300c241f16c0d2860f62726d4f5f7d21a38d1b
- SSDEEP
  
  768:W7BlpDpARFbhAMMgU47BlpDpARFbhAMMgUI:W7ZDpApAMMgU47ZDpApAMMgUI
Score

9^/10

discovery ransomware
- Renames multiple (4542) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware