758cd1d5f66e01b34f1d43060d17701d4a0aefa7904ee050bf299edbf94e9916 | Triage

Sharing

General

Target

758cd1d5f66e01b34f1d43060d17701d4a0aefa7904ee050bf299edbf94e9916N
Size

83KB
Sample

240921-mqabfaxgng
MD5

9b213f799e518f45eea2933dfc289260
SHA1

a30ba95d48fcb517c5bd0bd6827adfd709441959
SHA256

758cd1d5f66e01b34f1d43060d17701d4a0aefa7904ee050bf299edbf94e9916
SHA512

61782b9f02f2dc8baa6ca0596efbd17b340b59ff14335856c95090ed6ed53a603f603d76ac92809b55a6a528db77c7faa6b2a90a6a7deaadfee9d375b5320673
SSDEEP

768:/7BlpQpARFbhNIuW85c5f7BlpQpARFbhNIuW85c5W:/7ZQpApjv697ZQpApjv6w

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  758cd1d5f66e01b34f1d43060d17701d4a0aefa7904ee050bf299edbf94e9916N
- Size
  
  83KB
- MD5
  
  9b213f799e518f45eea2933dfc289260
- SHA1
  
  a30ba95d48fcb517c5bd0bd6827adfd709441959
- SHA256
  
  758cd1d5f66e01b34f1d43060d17701d4a0aefa7904ee050bf299edbf94e9916
- SHA512
  
  61782b9f02f2dc8baa6ca0596efbd17b340b59ff14335856c95090ed6ed53a603f603d76ac92809b55a6a528db77c7faa6b2a90a6a7deaadfee9d375b5320673
- SSDEEP
  
  768:/7BlpQpARFbhNIuW85c5f7BlpQpARFbhNIuW85c5W:/7ZQpApjv697ZQpApjv6w
Score

9^/10

discovery ransomware
- Renames multiple (4756) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware