63da49a101677f051ca492079d439402b2316c67ea786aa9ff3c57ae5046ca1d | Triage

Sharing

General

Target

4587ec5f87a22b22d5c7e20ab19761a0N.exe
Size

47KB
Sample

240724-edre7azdnf
MD5

4587ec5f87a22b22d5c7e20ab19761a0
SHA1

68952ea4f7f30e23b3a5c2b5cfc3ac77c288aa43
SHA256

63da49a101677f051ca492079d439402b2316c67ea786aa9ff3c57ae5046ca1d
SHA512

190db74cca31acc5e0d3f105667287be7f5e2911115f01b28f82f95473751e7af1850ce5f3eb03bb641641f472f9e03d2ac8f21af380c667d15a2c4eabc02213
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfpZi4w9i4wMNFpOyPRRRTFMu+RRTFMuf:W7ZppApBULcfpHLcfpVwhwMDpOyPRLKn

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  4587ec5f87a22b22d5c7e20ab19761a0N.exe
- Size
  
  47KB
- MD5
  
  4587ec5f87a22b22d5c7e20ab19761a0
- SHA1
  
  68952ea4f7f30e23b3a5c2b5cfc3ac77c288aa43
- SHA256
  
  63da49a101677f051ca492079d439402b2316c67ea786aa9ff3c57ae5046ca1d
- SHA512
  
  190db74cca31acc5e0d3f105667287be7f5e2911115f01b28f82f95473751e7af1850ce5f3eb03bb641641f472f9e03d2ac8f21af380c667d15a2c4eabc02213
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfpZi4w9i4wMNFpOyPRRRTFMu+RRTFMuf:W7ZppApBULcfpHLcfpVwhwMDpOyPRLKn
Score

9^/10

discovery ransomware
- Renames multiple (3261) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware