da86dc76e1068a673c4bd361d49f302d3378efd42143528f890323750e704bc8 | Triage

Sharing

General

Target

06a2100de89527142cc02e767d729c90N.exe
Size

42KB
Sample

240727-1nmqmstejb
MD5

06a2100de89527142cc02e767d729c90
SHA1

5a8319cf4bf1a18667da13be2b68ff06a2f67681
SHA256

da86dc76e1068a673c4bd361d49f302d3378efd42143528f890323750e704bc8
SHA512

3f04a4c67df467b9eb4db3ca8086d0aff04b942f82b9a2d345f335f931ec1c1c74e70c16c481d3a8d83b45dd8b6a18548f70d6e90a7790965687ba12769b1bb1
SSDEEP

768:/7BlpQpARFbhn54fmiy+3BVr54fmiy+3BVH:/7ZQpApmiH

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  06a2100de89527142cc02e767d729c90N.exe
- Size
  
  42KB
- MD5
  
  06a2100de89527142cc02e767d729c90
- SHA1
  
  5a8319cf4bf1a18667da13be2b68ff06a2f67681
- SHA256
  
  da86dc76e1068a673c4bd361d49f302d3378efd42143528f890323750e704bc8
- SHA512
  
  3f04a4c67df467b9eb4db3ca8086d0aff04b942f82b9a2d345f335f931ec1c1c74e70c16c481d3a8d83b45dd8b6a18548f70d6e90a7790965687ba12769b1bb1
- SSDEEP
  
  768:/7BlpQpARFbhn54fmiy+3BVr54fmiy+3BVH:/7ZQpApmiH
Score

9^/10

discovery ransomware
- Renames multiple (231) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware