51dda95f62ee5a05883a8e4b4be3f7bf036c0221aec5ae7eb3df1dac7e12f0c1 | Triage

Sharing

General

Target

178a174aa178d3e2b61b7e77d19a0870N.exe
Size

45KB
Sample

240801-2yfwhsvhnd
MD5

178a174aa178d3e2b61b7e77d19a0870
SHA1

f4d436fd629c7eb793285db4f0b51fe4be256577
SHA256

51dda95f62ee5a05883a8e4b4be3f7bf036c0221aec5ae7eb3df1dac7e12f0c1
SHA512

cc374901aff660d0d6570c38ea92eafab8a46e5f1dd13d0e477118aa4979f7140d77d90093b074ed37100631dbe4d8d7dd9bd6130d41a98ee20fc56b96ed7ee0
SSDEEP

768:W7BlpppARFbhHFoqAJwBqAJwRJofJoinI5nIWfQfs:W7ZppApaJofJoiwP

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  178a174aa178d3e2b61b7e77d19a0870N.exe
- Size
  
  45KB
- MD5
  
  178a174aa178d3e2b61b7e77d19a0870
- SHA1
  
  f4d436fd629c7eb793285db4f0b51fe4be256577
- SHA256
  
  51dda95f62ee5a05883a8e4b4be3f7bf036c0221aec5ae7eb3df1dac7e12f0c1
- SHA512
  
  cc374901aff660d0d6570c38ea92eafab8a46e5f1dd13d0e477118aa4979f7140d77d90093b074ed37100631dbe4d8d7dd9bd6130d41a98ee20fc56b96ed7ee0
- SSDEEP
  
  768:W7BlpppARFbhHFoqAJwBqAJwRJofJoinI5nIWfQfs:W7ZppApaJofJoiwP
Score

9^/10

discovery ransomware
- Renames multiple (3443) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware