General

  • Target

    f62cabaa6dab158ec0fe3e5bac6e7472909defcab0d3d7d66dbff610deb92b99

  • Size

    93KB

  • Sample

    241020-egd92axena

  • MD5

    2eb336fdf024fc938536c1944aafef7c

  • SHA1

    065ee6ccdc406adf1b09c9b7aeb199d069477ddc

  • SHA256

    f62cabaa6dab158ec0fe3e5bac6e7472909defcab0d3d7d66dbff610deb92b99

  • SHA512

    c51ff087ff78a704e3f1e28a7a270c60256af81a55a26b3b0eebcbe2fe6d5f733405c42e7540f8460744f34465d1eac8f69a128a3ae2e2a67c163ab90fd75b0e

  • SSDEEP

    1536:W7Z+pAp2nKLRKIKqoLSarSap7Z+pAp2nKLRKIKqoLSarSaN:6+Wp2naKIKNSarSaT+Wp2naKIKNSarS6

Score
9/10

Malware Config

Targets

    • Target

      f62cabaa6dab158ec0fe3e5bac6e7472909defcab0d3d7d66dbff610deb92b99

    • Size

      93KB

    • MD5

      2eb336fdf024fc938536c1944aafef7c

    • SHA1

      065ee6ccdc406adf1b09c9b7aeb199d069477ddc

    • SHA256

      f62cabaa6dab158ec0fe3e5bac6e7472909defcab0d3d7d66dbff610deb92b99

    • SHA512

      c51ff087ff78a704e3f1e28a7a270c60256af81a55a26b3b0eebcbe2fe6d5f733405c42e7540f8460744f34465d1eac8f69a128a3ae2e2a67c163ab90fd75b0e

    • SSDEEP

      1536:W7Z+pAp2nKLRKIKqoLSarSap7Z+pAp2nKLRKIKqoLSarSaN:6+Wp2naKIKNSarSaT+Wp2naKIKNSarS6

    Score
    9/10
    • Renames multiple (4726) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks