d77b2ddfe75009d8da4531b2fd8544219cf7c21c45e3cef1980bd69200f5ff6c | Triage

Sharing

General

Target

d77b2ddfe75009d8da4531b2fd8544219cf7c21c45e3cef1980bd69200f5ff6cN
Size

91KB
Sample

240921-r5zxvsxepg
MD5

e1d211410fbce27f3ede56c6f1a8b7d0
SHA1

683e4fdfec33df137a7a9a5b135b91afae27359d
SHA256

d77b2ddfe75009d8da4531b2fd8544219cf7c21c45e3cef1980bd69200f5ff6c
SHA512

5e5e3cb9948203a9584c5e5e9c2757ba00a85a2b0c902027d23a59e24ecedfa077a2a2168aa84272aad9b241da32375cb98bc1ac4d63e82f5548c683330b6726
SSDEEP

1536:W7ZppApBULcfpHLcfpyDuCQCQ7ZppApBULcfpHLcfpyDuCQCf:6pWpBwchcwDipWpBwchcwDN

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  d77b2ddfe75009d8da4531b2fd8544219cf7c21c45e3cef1980bd69200f5ff6cN
- Size
  
  91KB
- MD5
  
  e1d211410fbce27f3ede56c6f1a8b7d0
- SHA1
  
  683e4fdfec33df137a7a9a5b135b91afae27359d
- SHA256
  
  d77b2ddfe75009d8da4531b2fd8544219cf7c21c45e3cef1980bd69200f5ff6c
- SHA512
  
  5e5e3cb9948203a9584c5e5e9c2757ba00a85a2b0c902027d23a59e24ecedfa077a2a2168aa84272aad9b241da32375cb98bc1ac4d63e82f5548c683330b6726
- SSDEEP
  
  1536:W7ZppApBULcfpHLcfpyDuCQCQ7ZppApBULcfpHLcfpyDuCQCf:6pWpBwchcwDipWpBwchcwDN
Score

9^/10

discovery ransomware
- Renames multiple (4541) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware