4948b4e3b984cfe6fd1372f60b4c50fe60c40bf121075516d0f7e13fe3c64c4e | Triage

Sharing

General

Target

9cbc3cd68a4d0a197a04484d9082e720N.exe
Size

36KB
Sample

240727-gm9dgazhnr
MD5

9cbc3cd68a4d0a197a04484d9082e720
SHA1

5f69f372f763c33629489f4fc5d22f573ddc9ed2
SHA256

4948b4e3b984cfe6fd1372f60b4c50fe60c40bf121075516d0f7e13fe3c64c4e
SHA512

66d1f6ea73023016dd056e734e9055a822bf2659c84f94536a4808c9b86f0e3fe51a818c8f22e8e862562dd1261473830e82a462dbf66aafe1add69329836a3b
SSDEEP

192:pACU3DIY0Br5xjL/EAgAQmP1oynLb22vB7m/FJHo7m/FJHbkJkFdLWi3dLWiU:yBs7Br5xjL8AgA71FbhvCDC

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  9cbc3cd68a4d0a197a04484d9082e720N.exe
- Size
  
  36KB
- MD5
  
  9cbc3cd68a4d0a197a04484d9082e720
- SHA1
  
  5f69f372f763c33629489f4fc5d22f573ddc9ed2
- SHA256
  
  4948b4e3b984cfe6fd1372f60b4c50fe60c40bf121075516d0f7e13fe3c64c4e
- SHA512
  
  66d1f6ea73023016dd056e734e9055a822bf2659c84f94536a4808c9b86f0e3fe51a818c8f22e8e862562dd1261473830e82a462dbf66aafe1add69329836a3b
- SSDEEP
  
  192:pACU3DIY0Br5xjL/EAgAQmP1oynLb22vB7m/FJHo7m/FJHbkJkFdLWi3dLWiU:yBs7Br5xjL8AgA71FbhvCDC
Score

9^/10

discovery ransomware
- Renames multiple (849) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware