4df305023a4653bacb2e2d7b2cd8034fa880231f4ede69c48f1c52d1ea1f4ff9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ee8b818c5232e302e6f8f4fe79bd9c00N.exe
Size

103KB
Sample

240725-x2sl9szajq
MD5

ee8b818c5232e302e6f8f4fe79bd9c00
SHA1

76ca19c4c159a5e79cc4e0243fe71b219f9a01b3
SHA256

4df305023a4653bacb2e2d7b2cd8034fa880231f4ede69c48f1c52d1ea1f4ff9
SHA512

70fafed143040e25e5fdad60284b672f8e0962d914b82ee7905175ec909db398206409608f2aab2a7648c9df38b0a2c0fcebcbd0689c9076bd1f56e91bac49e8
SSDEEP

3072:9QWpze+eO888888888888888888888888888888888888888888888888888888F:Lpe+ekey

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  ee8b818c5232e302e6f8f4fe79bd9c00N.exe
- Size
  
  103KB
- MD5
  
  ee8b818c5232e302e6f8f4fe79bd9c00
- SHA1
  
  76ca19c4c159a5e79cc4e0243fe71b219f9a01b3
- SHA256
  
  4df305023a4653bacb2e2d7b2cd8034fa880231f4ede69c48f1c52d1ea1f4ff9
- SHA512
  
  70fafed143040e25e5fdad60284b672f8e0962d914b82ee7905175ec909db398206409608f2aab2a7648c9df38b0a2c0fcebcbd0689c9076bd1f56e91bac49e8
- SSDEEP
  
  3072:9QWpze+eO888888888888888888888888888888888888888888888888888888F:Lpe+ekey
Score

9^/10

discovery ransomware
- Renames multiple (2661) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware