430e0c9242e49f1de287191b4afaaab382d4740cd798f976c9d76f5c08c75632 | Triage

Sharing

General

Target

b97451b9a3b51fda9719c03850a8bd40N.exe
Size

37KB
Sample

240727-myf4yswamp
MD5

b97451b9a3b51fda9719c03850a8bd40
SHA1

dd9cbd396b60f643d2024b5aa83a86a788b896d5
SHA256

430e0c9242e49f1de287191b4afaaab382d4740cd798f976c9d76f5c08c75632
SHA512

67903607c441297328a2c4eb32ae183982c69241efda306f940e9140c9d5f9a46c125f518fc8fbe45ac3fa0f36ff26bfb7ba092589c327d20c8706de8100bb86
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFkvG:W7ZppApBULcfpHLcfpyDr

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  b97451b9a3b51fda9719c03850a8bd40N.exe
- Size
  
  37KB
- MD5
  
  b97451b9a3b51fda9719c03850a8bd40
- SHA1
  
  dd9cbd396b60f643d2024b5aa83a86a788b896d5
- SHA256
  
  430e0c9242e49f1de287191b4afaaab382d4740cd798f976c9d76f5c08c75632
- SHA512
  
  67903607c441297328a2c4eb32ae183982c69241efda306f940e9140c9d5f9a46c125f518fc8fbe45ac3fa0f36ff26bfb7ba092589c327d20c8706de8100bb86
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFkvG:W7ZppApBULcfpHLcfpyDr
Score

9^/10

discovery ransomware
- Renames multiple (2097) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware