895b86327255c123583f613888ca68b15e843df67b8ef92b6883ffebbc16dec6 | Triage

Sharing

General

Target

f075712abc2dd0c21c8bcf7fb6c8e870N.exe
Size

34KB
Sample

240725-ygbzfs1akr
MD5

f075712abc2dd0c21c8bcf7fb6c8e870
SHA1

9d371b8419d5002893bcc0ae7a8281b3d3640414
SHA256

895b86327255c123583f613888ca68b15e843df67b8ef92b6883ffebbc16dec6
SHA512

9a4f84427204bab811d3e1259265972d07ca7571f6c3b32ef6d395125d616a9e7b40eaa133f805d35758ed20a3d07fbb66a940e8e9e3a0584a09a8801d0a897c
SSDEEP

192:pACU3DIY0Br5xjL/EAgAQmP1oynLb22vB7m/FJHo7m/FJHA9jxjJY1MEY1MQ:yBs7Br5xjL8AgA71Fbhv/FaMVMQ

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  f075712abc2dd0c21c8bcf7fb6c8e870N.exe
- Size
  
  34KB
- MD5
  
  f075712abc2dd0c21c8bcf7fb6c8e870
- SHA1
  
  9d371b8419d5002893bcc0ae7a8281b3d3640414
- SHA256
  
  895b86327255c123583f613888ca68b15e843df67b8ef92b6883ffebbc16dec6
- SHA512
  
  9a4f84427204bab811d3e1259265972d07ca7571f6c3b32ef6d395125d616a9e7b40eaa133f805d35758ed20a3d07fbb66a940e8e9e3a0584a09a8801d0a897c
- SSDEEP
  
  192:pACU3DIY0Br5xjL/EAgAQmP1oynLb22vB7m/FJHo7m/FJHA9jxjJY1MEY1MQ:yBs7Br5xjL8AgA71Fbhv/FaMVMQ
Score

9^/10

discovery ransomware
- Renames multiple (3123) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware