34805b70e8a45d039ac77695b0c207057088bcfff4e3f5a345b68b1f341ddaee | Triage

Sharing

General

Target

ca82078e00547af34b7df428f10d8bd0N.exe
Size

55KB
Sample

240725-nrn2nazbqh
MD5

ca82078e00547af34b7df428f10d8bd0
SHA1

280b0773df8543683c3b46e1d2d807b057b45749
SHA256

34805b70e8a45d039ac77695b0c207057088bcfff4e3f5a345b68b1f341ddaee
SHA512

612b0aaaf8096d385769d947109a375702998ae45473301f34f0034ce5756622a3caf62ef6e72289ccead6958a7e132094296cb305e1b9200dd31d11cea6a181
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfpVF/MF/3Nw/Nwk0cEMdV8IEMdV85/4:W7ZppApBULcfpHLcfpX2/Nw/NwmxP

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  ca82078e00547af34b7df428f10d8bd0N.exe
- Size
  
  55KB
- MD5
  
  ca82078e00547af34b7df428f10d8bd0
- SHA1
  
  280b0773df8543683c3b46e1d2d807b057b45749
- SHA256
  
  34805b70e8a45d039ac77695b0c207057088bcfff4e3f5a345b68b1f341ddaee
- SHA512
  
  612b0aaaf8096d385769d947109a375702998ae45473301f34f0034ce5756622a3caf62ef6e72289ccead6958a7e132094296cb305e1b9200dd31d11cea6a181
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfpVF/MF/3Nw/Nwk0cEMdV8IEMdV85/4:W7ZppApBULcfpHLcfpX2/Nw/NwmxP
Score

9^/10

discovery ransomware
- Renames multiple (2853) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware