d1ac3930a9cc676f09fa7a72d5db78852841a235f60e1b5ff89d170721e62170 | Triage

Sharing

General

Target

013ca0dce4d8993bacc5adb13ac51690N.exe
Size

44KB
Sample

240727-z6c4gssgmd
MD5

013ca0dce4d8993bacc5adb13ac51690
SHA1

766a177d220221af3c0a9c8a44617047d532b92d
SHA256

d1ac3930a9cc676f09fa7a72d5db78852841a235f60e1b5ff89d170721e62170
SHA512

fd9bb9cab5fbf1e7b9b6d4bdc0980e0ef5278a09fd538d5f8aff5ee56083e47c466bdeb135dfbc5a622b9ad804d936834cffd5ee013b4bdea86d5484d4ce7a03
SSDEEP

384:GBt7Br5xjL9AgA71FbhvuNBN2TQ1nrdfvfI:W7BlpppARFbhknrdfvfI

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  013ca0dce4d8993bacc5adb13ac51690N.exe
- Size
  
  44KB
- MD5
  
  013ca0dce4d8993bacc5adb13ac51690
- SHA1
  
  766a177d220221af3c0a9c8a44617047d532b92d
- SHA256
  
  d1ac3930a9cc676f09fa7a72d5db78852841a235f60e1b5ff89d170721e62170
- SHA512
  
  fd9bb9cab5fbf1e7b9b6d4bdc0980e0ef5278a09fd538d5f8aff5ee56083e47c466bdeb135dfbc5a622b9ad804d936834cffd5ee013b4bdea86d5484d4ce7a03
- SSDEEP
  
  384:GBt7Br5xjL9AgA71FbhvuNBN2TQ1nrdfvfI:W7BlpppARFbhknrdfvfI
Score

9^/10

discovery ransomware
- Renames multiple (2049) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware