General

  • Target

    d68fd4950c666e37588db322e42d9c2bbd42caf39305626ea71529bf18a85ff7

  • Size

    156KB

  • Sample

    250519-ns76xsxmz8

  • MD5

    de7c4c7d41ce269e9f620ee871feb5e6

  • SHA1

    34e5e9cc8e0527133f3f5dfdeb3933424b5c30a7

  • SHA256

    d68fd4950c666e37588db322e42d9c2bbd42caf39305626ea71529bf18a85ff7

  • SHA512

    101a6099d8cddd55e7c51ff933f9f1faa6ae791261b9ed886ae6d83212652b6ed54733cb4dc2ed050103cde0e512c7e93084f99099b4bcbccb56a6d25549e10a

  • SSDEEP

    3072:gWTSIoXkZA/gwjHnrhtVufJO05m4uvHwog8yT5Fo9:gWTSIoXNHnr1GJOl4uvjgddFm

Score
9/10

Malware Config

Targets

    • Target

      d68fd4950c666e37588db322e42d9c2bbd42caf39305626ea71529bf18a85ff7

    • Size

      156KB

    • MD5

      de7c4c7d41ce269e9f620ee871feb5e6

    • SHA1

      34e5e9cc8e0527133f3f5dfdeb3933424b5c30a7

    • SHA256

      d68fd4950c666e37588db322e42d9c2bbd42caf39305626ea71529bf18a85ff7

    • SHA512

      101a6099d8cddd55e7c51ff933f9f1faa6ae791261b9ed886ae6d83212652b6ed54733cb4dc2ed050103cde0e512c7e93084f99099b4bcbccb56a6d25549e10a

    • SSDEEP

      3072:gWTSIoXkZA/gwjHnrhtVufJO05m4uvHwog8yT5Fo9:gWTSIoXNHnr1GJOl4uvjgddFm

    Score
    9/10
    • Renames multiple (5282) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks