ecd70a0a114686b2b31d5af61f9dcbbd5f2687160ab344c0fe4524c03cf23d2d | Triage

Sharing

General

Target

da8f988ebb8733fb11c8b85ebd15cb30N.exe
Size

49KB
Sample

240725-samjqavcrj
MD5

da8f988ebb8733fb11c8b85ebd15cb30
SHA1

d81ac1f20b7401dd01765ede5de0e3cdc1424381
SHA256

ecd70a0a114686b2b31d5af61f9dcbbd5f2687160ab344c0fe4524c03cf23d2d
SHA512

2565c199b5ac4f0b8b657508cf1a3b25e33f6c93add49af6c8a23f4b9ddfb2916dadbeaf83082e046b3965a24c7e7ddbbb4219df3c81406f91ae1892e7bebade
SSDEEP

1536:W7ZppApcZ/D5zf6ydyf+abMkF24kzK3jbrCkoRWNkzZ/D5zf6ydyf+abMkF24kzD:6pWpcZ/D5zf6ydyf+abMkF24kzK3jbrQ

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  da8f988ebb8733fb11c8b85ebd15cb30N.exe
- Size
  
  49KB
- MD5
  
  da8f988ebb8733fb11c8b85ebd15cb30
- SHA1
  
  d81ac1f20b7401dd01765ede5de0e3cdc1424381
- SHA256
  
  ecd70a0a114686b2b31d5af61f9dcbbd5f2687160ab344c0fe4524c03cf23d2d
- SHA512
  
  2565c199b5ac4f0b8b657508cf1a3b25e33f6c93add49af6c8a23f4b9ddfb2916dadbeaf83082e046b3965a24c7e7ddbbb4219df3c81406f91ae1892e7bebade
- SSDEEP
  
  1536:W7ZppApcZ/D5zf6ydyf+abMkF24kzK3jbrCkoRWNkzZ/D5zf6ydyf+abMkF24kzD:6pWpcZ/D5zf6ydyf+abMkF24kzK3jbrQ
Score

9^/10

discovery ransomware
- Renames multiple (337) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware