Overview

overview

9

Static

static

3

d8587e3437...48.exe

windows7-x64

9

d8587e3437...48.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d8587e34371ac057d50da3f45efbb0505f8b60ae649d46ccc749c410561b8648

  • Size

    178KB

  • Sample

    240701-dwd25svclf

  • MD5

    8ecb8f4765f8ead254b629644fcef57f

  • SHA1

    41867e845bb3f2ce7a0ebc919e7bb0b12cf12317

  • SHA256

    d8587e34371ac057d50da3f45efbb0505f8b60ae649d46ccc749c410561b8648

  • SHA512

    ae2b41aca0d42940240f3cd1107b133819f3e958094690b1c349c633f3394132277f6a954c84247fda763f34c228140b80498e2cd85e47629dfdce609b2a4445

  • SSDEEP

    3072:6e7WpMaxeb0CYJ97lEYNR73e+eKZOf7fAe7WpMaxeb0CYJ97lEYNR73e+eKZOf7g:RqKvb0CYJ973e+eKZOf7fjqKvb0CYJ9x

Score
9/10
ransomware

Malware Config

Targets

    • Target

      d8587e34371ac057d50da3f45efbb0505f8b60ae649d46ccc749c410561b8648

    • Size

      178KB

    • MD5

      8ecb8f4765f8ead254b629644fcef57f

    • SHA1

      41867e845bb3f2ce7a0ebc919e7bb0b12cf12317

    • SHA256

      d8587e34371ac057d50da3f45efbb0505f8b60ae649d46ccc749c410561b8648

    • SHA512

      ae2b41aca0d42940240f3cd1107b133819f3e958094690b1c349c633f3394132277f6a954c84247fda763f34c228140b80498e2cd85e47629dfdce609b2a4445

    • SSDEEP

      3072:6e7WpMaxeb0CYJ97lEYNR73e+eKZOf7fAe7WpMaxeb0CYJ97lEYNR73e+eKZOf7g:RqKvb0CYJ973e+eKZOf7fjqKvb0CYJ9x

    Score
    9/10
    ransomware

    • Renames multiple (106) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks