8bcd0f6cb2c259f22ade6de07f926c2e1512948af545e7a33fd27f784ef12bfd | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
3649CE18B9FD8A18D8F4FED729AABC8D.bin
Size 9.3MB
Sample200727-11vxalvpyx
SHA256 8bcd0f6cb2c259f22ade6de07f926c2e1512948af545e7a33fd27f784ef12bfd
MD5 3649ce18b9fd8a18d8f4fed729aabc8d
SHA1 25ae2167260e1149ff6b8e1a607d1f823a61446e
SHA512 e98f6781d99f510c9ff3013d0a5b1adae3a63c8f4864597f4c8654a82d618ad578d52a89e6e6ad175fd275ab16e050740336c92ffde895c1d080d642f823e72d
MD5 SHA1 SHA512

Score

8^/10

ransomware

Malware Config

Targets

- Target
  3649CE18B9FD8A18D8F4FED729AABC8D.bin
- Size 9.3MB
- SHA256 8bcd0f6cb2c259f22ade6de07f926c2e1512948af545e7a33fd27f784ef12bfd
- MD5 3649ce18b9fd8a18d8f4fed729aabc8d
- SHA1 25ae2167260e1149ff6b8e1a607d1f823a61446e
- SHA512 e98f6781d99f510c9ff3013d0a5b1adae3a63c8f4864597f4c8654a82d618ad578d52a89e6e6ad175fd275ab16e050740336c92ffde895c1d080d642f823e72d
- MD5 SHA1 SHA512
Score

8^/10

ransomware
- Modifies extensions of user files
  Ransomware generally changes the extension on encrypted files.
  ransomware
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2