473d8355e0223ba00d5e7d202f28f982e71e17886422270293f2f74aadd95a0e | Triage

Sharing

General

Target

0286c15f155ede0b4f6a6e25f3d0e5a0N.exe
Size

71KB
Sample

240727-1avjbstajf
MD5

0286c15f155ede0b4f6a6e25f3d0e5a0
SHA1

ea2d01a77510ea3f816d6b7d04d06f2e54abe920
SHA256

473d8355e0223ba00d5e7d202f28f982e71e17886422270293f2f74aadd95a0e
SHA512

d3638a6eb50875c3435a17bc1e3ca3e95cb94c51296fd24344c6046ccbcaaf123b2436a1b4078837eaa823faf21e7713000f90c1e0d2f4693f5aca54db8139c6
SSDEEP

768:/7BlpQpARFbhN7BlpQpARFbhkCqh86ICqh86z:/7ZQpApN7ZQpApAdsdz

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  0286c15f155ede0b4f6a6e25f3d0e5a0N.exe
- Size
  
  71KB
- MD5
  
  0286c15f155ede0b4f6a6e25f3d0e5a0
- SHA1
  
  ea2d01a77510ea3f816d6b7d04d06f2e54abe920
- SHA256
  
  473d8355e0223ba00d5e7d202f28f982e71e17886422270293f2f74aadd95a0e
- SHA512
  
  d3638a6eb50875c3435a17bc1e3ca3e95cb94c51296fd24344c6046ccbcaaf123b2436a1b4078837eaa823faf21e7713000f90c1e0d2f4693f5aca54db8139c6
- SSDEEP
  
  768:/7BlpQpARFbhN7BlpQpARFbhkCqh86ICqh86z:/7ZQpApN7ZQpApAdsdz
Score

9^/10

discovery ransomware
- Renames multiple (225) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware