1a45afe66e3750d1058535c2b26a682000652ffca2daaeb3865cf167fd2e1948 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a45afe66e3750d1058535c2b26a682000652ffca2daaeb3865cf167fd2e1948N
Size

77KB
Sample

240921-thmp5a1bme
MD5

f38837a93e2f40e5d0c96e3d86c26b20
SHA1

a0cb9522d2cb14f5e38addf484693b6506f5f9d6
SHA256

1a45afe66e3750d1058535c2b26a682000652ffca2daaeb3865cf167fd2e1948
SHA512

d28f49375dc6adf8e1f75a874638815e8c57e95b58417325a10ab6419f97aea77cc04c252de4ea6d5bfec0a8616e97c868fdea79c256a9d1e7feaf5e7f6b59d6
SSDEEP

1536:W7ZppApBULcfpHLcfpSo3fL7ZppApBULcfpHLcfpSo3fN:6pWpBwchcxpWpBwchcl

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  1a45afe66e3750d1058535c2b26a682000652ffca2daaeb3865cf167fd2e1948N
- Size
  
  77KB
- MD5
  
  f38837a93e2f40e5d0c96e3d86c26b20
- SHA1
  
  a0cb9522d2cb14f5e38addf484693b6506f5f9d6
- SHA256
  
  1a45afe66e3750d1058535c2b26a682000652ffca2daaeb3865cf167fd2e1948
- SHA512
  
  d28f49375dc6adf8e1f75a874638815e8c57e95b58417325a10ab6419f97aea77cc04c252de4ea6d5bfec0a8616e97c868fdea79c256a9d1e7feaf5e7f6b59d6
- SSDEEP
  
  1536:W7ZppApBULcfpHLcfpSo3fL7ZppApBULcfpHLcfpSo3fN:6pWpBwchcxpWpBwchcl
Score

9^/10

discovery ransomware
- Renames multiple (3974) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware