e13b59e6ef25540f978d4a2e499aafed4702cc4c3aebd7a968f32d4d809f0c31 | Triage

Sharing

General

Target

1fdc5dd849430d7f56fe9c1cbf36dd50N.exe
Size

53KB
Sample

240728-ag999awflj
MD5

1fdc5dd849430d7f56fe9c1cbf36dd50
SHA1

184f742bb1b2e4fdf228d4aad6c3b4391e40fc46
SHA256

e13b59e6ef25540f978d4a2e499aafed4702cc4c3aebd7a968f32d4d809f0c31
SHA512

77f8633d425230645c8c82914ebbd4161093eaa9d80c39f30db09889724da621db3ae559c425e053f60c12af432a1b426854a8dc8ed28eff459bdeed08162944
SSDEEP

768:W7BlpppARFbhwEnAAJ+AAJ9vcYNnVvcYNnfy7/d:W7ZppApwEk7n97nE

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  1fdc5dd849430d7f56fe9c1cbf36dd50N.exe
- Size
  
  53KB
- MD5
  
  1fdc5dd849430d7f56fe9c1cbf36dd50
- SHA1
  
  184f742bb1b2e4fdf228d4aad6c3b4391e40fc46
- SHA256
  
  e13b59e6ef25540f978d4a2e499aafed4702cc4c3aebd7a968f32d4d809f0c31
- SHA512
  
  77f8633d425230645c8c82914ebbd4161093eaa9d80c39f30db09889724da621db3ae559c425e053f60c12af432a1b426854a8dc8ed28eff459bdeed08162944
- SSDEEP
  
  768:W7BlpppARFbhwEnAAJ+AAJ9vcYNnVvcYNnfy7/d:W7ZppApwEk7n97nE
Score

9^/10

discovery ransomware
- Renames multiple (1563) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware