d2c235400384f93b5bb69f749b8f827188da6289cfefe96221c7ff67cc9a4809 | Triage

Sharing

General

Target

d2c235400384f93b5bb69f749b8f827188da6289cfefe96221c7ff67cc9a4809N
Size

90KB
Sample

240919-dw56maydqp
MD5

c9eba7bb63c21cf4a267f6faa0cee540
SHA1

636420808775192dc024303d53ac415d6b42acba
SHA256

d2c235400384f93b5bb69f749b8f827188da6289cfefe96221c7ff67cc9a4809
SHA512

1bff9f8b0358a4e2565d0c87353b5b4cc06625cce2569093da66daa8556e5e5e3cd3c9368a13a4fb5117f54d172e988b715fe952b4b0d54983f99b3ac10ef9cd
SSDEEP

1536:W7Z2sspApctpQRtpQRD7Z2sspApctpQRtpQRz:62ssWpAC02ssWpACC

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  d2c235400384f93b5bb69f749b8f827188da6289cfefe96221c7ff67cc9a4809N
- Size
  
  90KB
- MD5
  
  c9eba7bb63c21cf4a267f6faa0cee540
- SHA1
  
  636420808775192dc024303d53ac415d6b42acba
- SHA256
  
  d2c235400384f93b5bb69f749b8f827188da6289cfefe96221c7ff67cc9a4809
- SHA512
  
  1bff9f8b0358a4e2565d0c87353b5b4cc06625cce2569093da66daa8556e5e5e3cd3c9368a13a4fb5117f54d172e988b715fe952b4b0d54983f99b3ac10ef9cd
- SSDEEP
  
  1536:W7Z2sspApctpQRtpQRD7Z2sspApctpQRtpQRz:62ssWpAC02ssWpACC
Score

9^/10

discovery ransomware
- Renames multiple (4690) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware