1514437757c8f72900549e74cce9567c465501b97064e1ca3be41f355c3e8230 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1514437757c8f72900549e74cce9567c465501b97064e1ca3be41f355c3e8230N.exe
Size

117KB
Sample

240925-bw5hzszcrg
MD5

b633e9659fec57d12f64d1b8ae8a2d20
SHA1

ab47bbae8f3da9366c2332a02b2fe2503091cf3f
SHA256

1514437757c8f72900549e74cce9567c465501b97064e1ca3be41f355c3e8230
SHA512

73c29fed013753b8ad927bf4bc1d433de1d397449f4eb9adec55425b5dddc91a9259142b806c4fd3f644cf55b20f71a4eef4fbe1134ac095f932681578f334cd
SSDEEP

3072:6e7WpwYRYUtdtSsBcae7WpwYRYUtdtSsBcKQz:Rq7agcxq7agcN

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  1514437757c8f72900549e74cce9567c465501b97064e1ca3be41f355c3e8230N.exe
- Size
  
  117KB
- MD5
  
  b633e9659fec57d12f64d1b8ae8a2d20
- SHA1
  
  ab47bbae8f3da9366c2332a02b2fe2503091cf3f
- SHA256
  
  1514437757c8f72900549e74cce9567c465501b97064e1ca3be41f355c3e8230
- SHA512
  
  73c29fed013753b8ad927bf4bc1d433de1d397449f4eb9adec55425b5dddc91a9259142b806c4fd3f644cf55b20f71a4eef4fbe1134ac095f932681578f334cd
- SSDEEP
  
  3072:6e7WpwYRYUtdtSsBcae7WpwYRYUtdtSsBcKQz:Rq7agcxq7agcN
Score

9^/10

discovery ransomware
- Renames multiple (4656) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware