2fa619a3c770fc3bedcba0e7ad35f121136b352084eb1e5d1c59323a709195cb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d29dcc08fb5e7046f86e3ab37fa8d5f0N.exe
Size

57KB
Sample

240725-qeg4pazgjq
MD5

d29dcc08fb5e7046f86e3ab37fa8d5f0
SHA1

d65d70807c164af8612f6bb883a3b6b3039daacc
SHA256

2fa619a3c770fc3bedcba0e7ad35f121136b352084eb1e5d1c59323a709195cb
SHA512

25ee20825c334c2a7b3ac1ea05d518b73c9f2f32d8d4bab3395cab69b6ed53bd5363576631a734bf0847d6f0dcfbc61714babd668205aee7efd84e6493203aac
SSDEEP

768:/7BlpQpARFbhIYJIJDYJIJxfFpsJcEKLF/MF/28HaT9C:/7ZQpApze+ejfFpsJPKZ2e8HaT9C

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  d29dcc08fb5e7046f86e3ab37fa8d5f0N.exe
- Size
  
  57KB
- MD5
  
  d29dcc08fb5e7046f86e3ab37fa8d5f0
- SHA1
  
  d65d70807c164af8612f6bb883a3b6b3039daacc
- SHA256
  
  2fa619a3c770fc3bedcba0e7ad35f121136b352084eb1e5d1c59323a709195cb
- SHA512
  
  25ee20825c334c2a7b3ac1ea05d518b73c9f2f32d8d4bab3395cab69b6ed53bd5363576631a734bf0847d6f0dcfbc61714babd668205aee7efd84e6493203aac
- SSDEEP
  
  768:/7BlpQpARFbhIYJIJDYJIJxfFpsJcEKLF/MF/28HaT9C:/7ZQpApze+ejfFpsJPKZ2e8HaT9C
Score

9^/10

discovery ransomware
- Renames multiple (3082) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware