Overview

overview

9

Static

static

3

eb9cc714f8...50.exe

windows7-x64

9

eb9cc714f8...50.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eb9cc714f8dcea11e1de7fef25bcdc2950a04406ec3785d68ee3ce1abb5ed450

  • Size

    87KB

  • Sample

    240701-evw21awcne

  • MD5

    91e6300e14f8f1fba5077a8e429c0bcb

  • SHA1

    f8ebce1705db2f75273aebcb7c5750a6f86ac7b1

  • SHA256

    eb9cc714f8dcea11e1de7fef25bcdc2950a04406ec3785d68ee3ce1abb5ed450

  • SHA512

    5c2cf0c7fd2a552b01ed35cb2340abd1106b6ec66ea4931c00b2eb21c439ec2bc0260030565ef4bb1ef289c3cc86b1f2ab68dc49029cc886f8a6b24d31ff8b08

  • SSDEEP

    768:W7BlpppARFbhMK4on7BlpppARFbhMK4od0N:W7ZppApMK4on7ZppApMK4od0N

Score
9/10
ransomware

Malware Config

Targets

    • Target

      eb9cc714f8dcea11e1de7fef25bcdc2950a04406ec3785d68ee3ce1abb5ed450

    • Size

      87KB

    • MD5

      91e6300e14f8f1fba5077a8e429c0bcb

    • SHA1

      f8ebce1705db2f75273aebcb7c5750a6f86ac7b1

    • SHA256

      eb9cc714f8dcea11e1de7fef25bcdc2950a04406ec3785d68ee3ce1abb5ed450

    • SHA512

      5c2cf0c7fd2a552b01ed35cb2340abd1106b6ec66ea4931c00b2eb21c439ec2bc0260030565ef4bb1ef289c3cc86b1f2ab68dc49029cc886f8a6b24d31ff8b08

    • SSDEEP

      768:W7BlpppARFbhMK4on7BlpppARFbhMK4od0N:W7ZppApMK4on7ZppApMK4od0N

    Score
    9/10
    ransomware

    • Renames multiple (4904) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks