General

  • Target

    9559f3daf8eec0d6fb4bad233551a35986d4d7d35a84ff653e835929f10cd708

  • Size

    45KB

  • Sample

    250519-nrpm7axmx6

  • MD5

    e874770934ff6d2917fd26086e198de8

  • SHA1

    0b411e99b0782320acedaabfeb1d11bf955ac0d2

  • SHA256

    9559f3daf8eec0d6fb4bad233551a35986d4d7d35a84ff653e835929f10cd708

  • SHA512

    faecad418a4d350425a4e48a6a591ec2bc796078e0390ad518a146476d2484e1c3557bcef1a735108759dd9eb27b7669aea004540d5fce0f355aa19ccbcb09ed

  • SSDEEP

    768:uZ4FLz8ae+rOn8ae+rO3IMqAJ/qAJWZ4FLz8ae+rOn8ae+rO3IMqAJ/qAJ/:uGIISGIID

Score
9/10

Malware Config

Targets

    • Target

      9559f3daf8eec0d6fb4bad233551a35986d4d7d35a84ff653e835929f10cd708

    • Size

      45KB

    • MD5

      e874770934ff6d2917fd26086e198de8

    • SHA1

      0b411e99b0782320acedaabfeb1d11bf955ac0d2

    • SHA256

      9559f3daf8eec0d6fb4bad233551a35986d4d7d35a84ff653e835929f10cd708

    • SHA512

      faecad418a4d350425a4e48a6a591ec2bc796078e0390ad518a146476d2484e1c3557bcef1a735108759dd9eb27b7669aea004540d5fce0f355aa19ccbcb09ed

    • SSDEEP

      768:uZ4FLz8ae+rOn8ae+rO3IMqAJ/qAJWZ4FLz8ae+rOn8ae+rO3IMqAJ/qAJ/:uGIISGIID

    Score
    9/10
    • Renames multiple (5206) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks