69a247951252f48a5de56e28d0efe0bfa8c99c15da91c3795d9247dab490a58a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e06517b38eca6c66be7e4742caf7d10N.exe
Size

38KB
Sample

240727-epqm2awfrm
MD5

8e06517b38eca6c66be7e4742caf7d10
SHA1

203f6095231e8fc14a5d47d3c25950758120e20f
SHA256

69a247951252f48a5de56e28d0efe0bfa8c99c15da91c3795d9247dab490a58a
SHA512

3d7f3d246f462576f75833dd0315ae2ceb8514d73408c47da917a8cc52cb60696c6634f2bff2bd0b29ec337a1a8612eb2e1728163d831209c2548fcbf5047560
SSDEEP

384:GBt7Br5xjL9AgA71FbhvuNBN1qmq4Gqmq4MAAAJOQAAAJOwjyjuc:W7BlpppARFbhwEnAAJ+AAJbjyjuc

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  8e06517b38eca6c66be7e4742caf7d10N.exe
- Size
  
  38KB
- MD5
  
  8e06517b38eca6c66be7e4742caf7d10
- SHA1
  
  203f6095231e8fc14a5d47d3c25950758120e20f
- SHA256
  
  69a247951252f48a5de56e28d0efe0bfa8c99c15da91c3795d9247dab490a58a
- SHA512
  
  3d7f3d246f462576f75833dd0315ae2ceb8514d73408c47da917a8cc52cb60696c6634f2bff2bd0b29ec337a1a8612eb2e1728163d831209c2548fcbf5047560
- SSDEEP
  
  384:GBt7Br5xjL9AgA71FbhvuNBN1qmq4Gqmq4MAAAJOQAAAJOwjyjuc:W7BlpppARFbhwEnAAJ+AAJbjyjuc
Score

9^/10

discovery ransomware
- Renames multiple (228) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware