f4b4a19550387a1fe1e3f1333adef39fcbd5abf9e35d82070d79abd119903f2f | Triage

Sharing

General

Target

f4b4a19550387a1fe1e3f1333adef39fcbd5abf9e35d82070d79abd119903f2fN
Size

104KB
Sample

241015-ggj7dsxhpd
MD5

720b2b8434a949e4fdb6e3cc6d8f9530
SHA1

024c0992089899c381b846faea8c2a88c2ffdcfd
SHA256

f4b4a19550387a1fe1e3f1333adef39fcbd5abf9e35d82070d79abd119903f2f
SHA512

2eb860fac7d5486475d3ff6a411b1ee36812a2f0159bc65c929758f22a7fab60355f2996197c5ca415a4c9dbd4fcea16172b67b9de6d102afc6346311806f858
SSDEEP

1536:/7ZQpAplJwsJwwneuYm0mv7ZQpAplJwsJwwneuYm0m67r:9QWpjndQWpjnK7r

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  f4b4a19550387a1fe1e3f1333adef39fcbd5abf9e35d82070d79abd119903f2fN
- Size
  
  104KB
- MD5
  
  720b2b8434a949e4fdb6e3cc6d8f9530
- SHA1
  
  024c0992089899c381b846faea8c2a88c2ffdcfd
- SHA256
  
  f4b4a19550387a1fe1e3f1333adef39fcbd5abf9e35d82070d79abd119903f2f
- SHA512
  
  2eb860fac7d5486475d3ff6a411b1ee36812a2f0159bc65c929758f22a7fab60355f2996197c5ca415a4c9dbd4fcea16172b67b9de6d102afc6346311806f858
- SSDEEP
  
  1536:/7ZQpAplJwsJwwneuYm0mv7ZQpAplJwsJwwneuYm0m67r:9QWpjndQWpjnK7r
Score

9^/10

discovery ransomware
- Renames multiple (4921) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware