2fa513601237d03c7059cb8b55c8b3e0e5005a76fe5b6ee8a4405fdbcf57f350 | Triage

Sharing

General

Target

b7e846950b4568bf2b1b79a5ca8ddd80N.exe
Size

35KB
Sample

240727-mpn37svejp
MD5

b7e846950b4568bf2b1b79a5ca8ddd80
SHA1

42ce3f4e47971215bfc3226f362a5b76de731685
SHA256

2fa513601237d03c7059cb8b55c8b3e0e5005a76fe5b6ee8a4405fdbcf57f350
SHA512

b02b220297f82c2d3f2d706294e1d01dad378b42d0b936b74b7536d604e11561c23a8b807d44e791e835b0278a246413cce992d6e2aba197eb05cb6da9846e24
SSDEEP

384:GBt7Br5xjL9AgA71Fbhv7bhvYYjYHbJQJbwXK5c54p:W7BlpppARFbhjbhQYjY94OK5c54p

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  b7e846950b4568bf2b1b79a5ca8ddd80N.exe
- Size
  
  35KB
- MD5
  
  b7e846950b4568bf2b1b79a5ca8ddd80
- SHA1
  
  42ce3f4e47971215bfc3226f362a5b76de731685
- SHA256
  
  2fa513601237d03c7059cb8b55c8b3e0e5005a76fe5b6ee8a4405fdbcf57f350
- SHA512
  
  b02b220297f82c2d3f2d706294e1d01dad378b42d0b936b74b7536d604e11561c23a8b807d44e791e835b0278a246413cce992d6e2aba197eb05cb6da9846e24
- SSDEEP
  
  384:GBt7Br5xjL9AgA71Fbhv7bhvYYjYHbJQJbwXK5c54p:W7BlpppARFbhjbhQYjY94OK5c54p
Score

9^/10

discovery ransomware
- Renames multiple (235) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware