7e26c3791baaaeb7d5fd7af4561a181316deaa5ba5e3f0201a9f482134f0f49c | Triage

Sharing

General

Target

18ae2ae875825adbceee38ec2c4199d0N.exe
Size

36KB
Sample

240723-2nh8wswdng
MD5

18ae2ae875825adbceee38ec2c4199d0
SHA1

d25c895afcbac46b4704693bb40d170e58979930
SHA256

7e26c3791baaaeb7d5fd7af4561a181316deaa5ba5e3f0201a9f482134f0f49c
SHA512

c4746b7126debdc723cd81261a34cade6319acd932a0e45ff22a1cb79d25e09f8a3675476582097aa6e2faf8f6f1e0e0d8d340b6b9b5c8817cdd12445ab893c3
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFZE:W7ZppApBULcfpHLcfpyDZE

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  18ae2ae875825adbceee38ec2c4199d0N.exe
- Size
  
  36KB
- MD5
  
  18ae2ae875825adbceee38ec2c4199d0
- SHA1
  
  d25c895afcbac46b4704693bb40d170e58979930
- SHA256
  
  7e26c3791baaaeb7d5fd7af4561a181316deaa5ba5e3f0201a9f482134f0f49c
- SHA512
  
  c4746b7126debdc723cd81261a34cade6319acd932a0e45ff22a1cb79d25e09f8a3675476582097aa6e2faf8f6f1e0e0d8d340b6b9b5c8817cdd12445ab893c3
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFZE:W7ZppApBULcfpHLcfpyDZE
Score

9^/10

discovery ransomware
- Renames multiple (3134) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware