58a0ec8974e4ded2d8c27bb0d2ba7260e836b0620bd220461bff541295acaa5b | Triage

Sharing

General

Target

edd0430c979033231567d7c6233cbcf0N.exe
Size

59KB
Sample

240725-xwpy7asdke
MD5

edd0430c979033231567d7c6233cbcf0
SHA1

0b3527f34c8a8f38c88b5588c8637052b39fd98c
SHA256

58a0ec8974e4ded2d8c27bb0d2ba7260e836b0620bd220461bff541295acaa5b
SHA512

0895a5d3b85fdce9fa2b5d0f7c33dbac6cac56e29c4c81fd49ffa610996fb5ff5fa125c5a17fb2c13b5482749cba9e5b00ce1533eabc6d10415cbeb90cfe3d2b
SSDEEP

768:W7BlphA7pARFbhvOsTKnKqtUK4F46OK4F46oMA88bRyvkijaTpA:W7ZhA7pApvOsOKjv46Ov46MbRsjaS

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  edd0430c979033231567d7c6233cbcf0N.exe
- Size
  
  59KB
- MD5
  
  edd0430c979033231567d7c6233cbcf0
- SHA1
  
  0b3527f34c8a8f38c88b5588c8637052b39fd98c
- SHA256
  
  58a0ec8974e4ded2d8c27bb0d2ba7260e836b0620bd220461bff541295acaa5b
- SHA512
  
  0895a5d3b85fdce9fa2b5d0f7c33dbac6cac56e29c4c81fd49ffa610996fb5ff5fa125c5a17fb2c13b5482749cba9e5b00ce1533eabc6d10415cbeb90cfe3d2b
- SSDEEP
  
  768:W7BlphA7pARFbhvOsTKnKqtUK4F46OK4F46oMA88bRyvkijaTpA:W7ZhA7pApvOsOKjv46Ov46MbRsjaS
Score

9^/10

discovery ransomware
- Renames multiple (2817) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware