fbb30d071167f740acba8b5ca323e27b138894ff8382ff48fc2b867b46318745 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2efb11b5b726494c0376549ee3384400N.exe
Size

42KB
Sample

240724-bgzzysseja
MD5

2efb11b5b726494c0376549ee3384400
SHA1

70bb401d252b46d174f2e7e8cf75c3cb05b406af
SHA256

fbb30d071167f740acba8b5ca323e27b138894ff8382ff48fc2b867b46318745
SHA512

bee3d526ac19df260a1c889da980e4fc730a8d53f205fe534d8f223131e87b8350396997d3aa6883af9b69a9f4c5adddb31a3aad2cbc056e1f677c0fe22f709c
SSDEEP

768:W7BlpppARFbhjbhQYjY+WyKoIWbsHfySkT5GeQbyi348oWc1RPOzkjId6q8UdrSt:W7ZppApBMyKoIWbsHfySkT5GeCyi348m

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  2efb11b5b726494c0376549ee3384400N.exe
- Size
  
  42KB
- MD5
  
  2efb11b5b726494c0376549ee3384400
- SHA1
  
  70bb401d252b46d174f2e7e8cf75c3cb05b406af
- SHA256
  
  fbb30d071167f740acba8b5ca323e27b138894ff8382ff48fc2b867b46318745
- SHA512
  
  bee3d526ac19df260a1c889da980e4fc730a8d53f205fe534d8f223131e87b8350396997d3aa6883af9b69a9f4c5adddb31a3aad2cbc056e1f677c0fe22f709c
- SSDEEP
  
  768:W7BlpppARFbhjbhQYjY+WyKoIWbsHfySkT5GeQbyi348oWc1RPOzkjId6q8UdrSt:W7ZppApBMyKoIWbsHfySkT5GeCyi348m
Score

9^/10

discovery ransomware
- Renames multiple (2868) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware