ca688a2d58399e04c1e4e24dc66a6508d2f38ef944a3ebc9ee00d2b7bb5382a8 | Triage

Sharing

General

Target

8e37372e289d67f06159f81f33190370N.exe
Size

59KB
Sample

240727-ep8hvawgkn
MD5

8e37372e289d67f06159f81f33190370
SHA1

4dc724159fe9b3ba1c9e2f0cb8058c80a281e5ec
SHA256

ca688a2d58399e04c1e4e24dc66a6508d2f38ef944a3ebc9ee00d2b7bb5382a8
SHA512

442a381646a98d14ec581d9de8606ad167a8ed1a91de29e33b3055a6dc171f14c9b0d6e106619bd30b631b723b5be3daa73fa72524c2d0f8b85c41a7699a6c13
SSDEEP

768:p7BlphA7dASbS+m0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM96:p7ZhA7dAp1++PJHJXA/OsIZfzc3/Q8g

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  8e37372e289d67f06159f81f33190370N.exe
- Size
  
  59KB
- MD5
  
  8e37372e289d67f06159f81f33190370
- SHA1
  
  4dc724159fe9b3ba1c9e2f0cb8058c80a281e5ec
- SHA256
  
  ca688a2d58399e04c1e4e24dc66a6508d2f38ef944a3ebc9ee00d2b7bb5382a8
- SHA512
  
  442a381646a98d14ec581d9de8606ad167a8ed1a91de29e33b3055a6dc171f14c9b0d6e106619bd30b631b723b5be3daa73fa72524c2d0f8b85c41a7699a6c13
- SSDEEP
  
  768:p7BlphA7dASbS+m0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM96:p7ZhA7dAp1++PJHJXA/OsIZfzc3/Q8g
Score

9^/10

discovery ransomware
- Renames multiple (2152) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware