General

  • Target

    812711a84cb98ac3d79cf409268b218a44e23aa7f3352042f21cb49867d3c5f6N

  • Size

    132KB

  • Sample

    241006-nm6e5swdna

  • MD5

    0bae7a61be498903ffe23b15a035f9f0

  • SHA1

    b048f95bfee798baf8f9bdb36aaea9d687893852

  • SHA256

    812711a84cb98ac3d79cf409268b218a44e23aa7f3352042f21cb49867d3c5f6

  • SHA512

    d96014be3bb28c78e38ab153f1a3b2ec14edecede023166fca8430804b67387ae41331cbb00e7f2310a798d9d421544d860cd87786422c59c22d612d96087d35

  • SSDEEP

    3072:6e7WpwYRYUtdtSsBc3wXe7WpwYRYUtdtSsBc3wc:Rq7agcHq7agcf

Score
9/10

Malware Config

Targets

    • Target

      812711a84cb98ac3d79cf409268b218a44e23aa7f3352042f21cb49867d3c5f6N

    • Size

      132KB

    • MD5

      0bae7a61be498903ffe23b15a035f9f0

    • SHA1

      b048f95bfee798baf8f9bdb36aaea9d687893852

    • SHA256

      812711a84cb98ac3d79cf409268b218a44e23aa7f3352042f21cb49867d3c5f6

    • SHA512

      d96014be3bb28c78e38ab153f1a3b2ec14edecede023166fca8430804b67387ae41331cbb00e7f2310a798d9d421544d860cd87786422c59c22d612d96087d35

    • SSDEEP

      3072:6e7WpwYRYUtdtSsBc3wXe7WpwYRYUtdtSsBc3wc:Rq7agcHq7agcf

    Score
    9/10
    • Renames multiple (698) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks