a106a0ea9941f35fd26176d9948ba9dda59e80dc43dd44b8db5345d927713984 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

450a13b4f8f2aa0c9d9cf09fa207f310N.exe
Size

55KB
Sample

240726-xtrp1ayekl
MD5

450a13b4f8f2aa0c9d9cf09fa207f310
SHA1

c9928cf3d32cb60e8c4515c866906e7975b90bcb
SHA256

a106a0ea9941f35fd26176d9948ba9dda59e80dc43dd44b8db5345d927713984
SHA512

7ca451dfa6106483c986c477b4a4448ae561eca92b5535803ba5134bcb3a6ca526e81a092f84be3ee21d6090da03d6b3729b636446392c720ecbc280612f74ef
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfpVF/MF/3Nw/Nwk0cEMdV8IEMdV85/B:W7ZppApBULcfpHLcfpX2/Nw/NwmxO

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  450a13b4f8f2aa0c9d9cf09fa207f310N.exe
- Size
  
  55KB
- MD5
  
  450a13b4f8f2aa0c9d9cf09fa207f310
- SHA1
  
  c9928cf3d32cb60e8c4515c866906e7975b90bcb
- SHA256
  
  a106a0ea9941f35fd26176d9948ba9dda59e80dc43dd44b8db5345d927713984
- SHA512
  
  7ca451dfa6106483c986c477b4a4448ae561eca92b5535803ba5134bcb3a6ca526e81a092f84be3ee21d6090da03d6b3729b636446392c720ecbc280612f74ef
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfpVF/MF/3Nw/Nwk0cEMdV8IEMdV85/B:W7ZppApBULcfpHLcfpX2/Nw/NwmxO
Score

9^/10

discovery ransomware
- Renames multiple (307) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware