130183f922e52534754341ffc2717bc87cfb4f1ea7a0c3d2783a527f00bd92c4 | Triage

Sharing

General

Target

130183f922e52534754341ffc2717bc87cfb4f1ea7a0c3d2783a527f00bd92c4N
Size

75KB
Sample

240921-2gv9waxgka
MD5

c694c98ad98c3dae02304b8140811a60
SHA1

8d0c9ecfd75b569300506f15c99b326361ecaf3b
SHA256

130183f922e52534754341ffc2717bc87cfb4f1ea7a0c3d2783a527f00bd92c4
SHA512

a6435680c297f14b8bb1d6ae9a399bffcb386d15b94b2bea4256adbadfbbea0eb000a6b93feff6db689cb234bc4c5315aeea055c9712ee07bcaba403a780b7b2
SSDEEP

768:W7Blp9pARFbhDF/MF/N7Blp9pARFbhDF/MF/u:W7Z9pApB2V7Z9pApB22

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  130183f922e52534754341ffc2717bc87cfb4f1ea7a0c3d2783a527f00bd92c4N
- Size
  
  75KB
- MD5
  
  c694c98ad98c3dae02304b8140811a60
- SHA1
  
  8d0c9ecfd75b569300506f15c99b326361ecaf3b
- SHA256
  
  130183f922e52534754341ffc2717bc87cfb4f1ea7a0c3d2783a527f00bd92c4
- SHA512
  
  a6435680c297f14b8bb1d6ae9a399bffcb386d15b94b2bea4256adbadfbbea0eb000a6b93feff6db689cb234bc4c5315aeea055c9712ee07bcaba403a780b7b2
- SSDEEP
  
  768:W7Blp9pARFbhDF/MF/N7Blp9pARFbhDF/MF/u:W7Z9pApB2V7Z9pApB22
Score

9^/10

discovery ransomware
- Renames multiple (321) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware