54495fc521714bdf22c54b1c2c98171dda35ad5980b53e46c31d23d747270646 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0d539928e0ad8ba821597a5c5da9c40N.exe
Size

99KB
Sample

240726-mdmq1avdrd
MD5

c0d539928e0ad8ba821597a5c5da9c40
SHA1

474a9f876bfc0c78bb8ce52afd6ab9414e54c45b
SHA256

54495fc521714bdf22c54b1c2c98171dda35ad5980b53e46c31d23d747270646
SHA512

4428e81be0dffdeb40e2695214b2f9d7e077e4f022d9a338b5a5537bc642f4642d89624044f4078615ec11f153300ac0c7075d584551acd4408cde056459faab
SSDEEP

768:W7BlpDpARFbhYQkQjjIXYvPXzWPXzK3733uF4V7en5c5HChCrmhyEXBwzEXBwuql:W7ZDpApYbWjIoPyPoLzV7c6Sha

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  c0d539928e0ad8ba821597a5c5da9c40N.exe
- Size
  
  99KB
- MD5
  
  c0d539928e0ad8ba821597a5c5da9c40
- SHA1
  
  474a9f876bfc0c78bb8ce52afd6ab9414e54c45b
- SHA256
  
  54495fc521714bdf22c54b1c2c98171dda35ad5980b53e46c31d23d747270646
- SHA512
  
  4428e81be0dffdeb40e2695214b2f9d7e077e4f022d9a338b5a5537bc642f4642d89624044f4078615ec11f153300ac0c7075d584551acd4408cde056459faab
- SSDEEP
  
  768:W7BlpDpARFbhYQkQjjIXYvPXzWPXzK3733uF4V7en5c5HChCrmhyEXBwzEXBwuql:W7ZDpApYbWjIoPyPoLzV7c6Sha
Score

9^/10

discovery ransomware
- Renames multiple (2840) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware