db03aac8d42b9271d7a4f87c1a05487862d7425c562585f5e0b34c555b1f5c5b | Triage

Sharing

General

Target

2c37b7ebeca6df6b36b205cc39986ae0N.exe
Size

45KB
Sample

240724-a6tc2a1gnc
MD5

2c37b7ebeca6df6b36b205cc39986ae0
SHA1

b9033fbff0d1ec20d7dea3ea396a9914dc88eac6
SHA256

db03aac8d42b9271d7a4f87c1a05487862d7425c562585f5e0b34c555b1f5c5b
SHA512

cb15d96ce7dfe78b6556ffa88c1c8485b9e75c350474f8898f420ad82ab6cb59ef21d630d600496a06766c891554cd5be08552b09280f987595321133a67c0fe
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfpRo+fOiJbfo+fOiJbCk8t8QPKrGrA:W7ZppApBULcfpHLcfp/ZeLPEwA

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  2c37b7ebeca6df6b36b205cc39986ae0N.exe
- Size
  
  45KB
- MD5
  
  2c37b7ebeca6df6b36b205cc39986ae0
- SHA1
  
  b9033fbff0d1ec20d7dea3ea396a9914dc88eac6
- SHA256
  
  db03aac8d42b9271d7a4f87c1a05487862d7425c562585f5e0b34c555b1f5c5b
- SHA512
  
  cb15d96ce7dfe78b6556ffa88c1c8485b9e75c350474f8898f420ad82ab6cb59ef21d630d600496a06766c891554cd5be08552b09280f987595321133a67c0fe
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfpRo+fOiJbfo+fOiJbCk8t8QPKrGrA:W7ZppApBULcfpHLcfp/ZeLPEwA
Score

9^/10

discovery ransomware
- Renames multiple (3108) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware