27a27cdf80a7a2d61836f7c39e2caa662d81fd79d1b91d15b1b4795db0c0dd25 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6e04899e5aedf803f192a3717fee75e0N.exe
Size

75KB
Sample

240802-htq15sxbja
MD5

6e04899e5aedf803f192a3717fee75e0
SHA1

8b0b734525cb47da00352a0233b4d50bed7a7b90
SHA256

27a27cdf80a7a2d61836f7c39e2caa662d81fd79d1b91d15b1b4795db0c0dd25
SHA512

04b3a335e097d3c4f7b47cecdf9971b333405dfd2fbe54cc812ee47c99a9dbe1f0b2747520f62d465ca3f87c58b15490235a66ab43162a80032940580a36d405
SSDEEP

1536:W7Z+pApfGQ3y3RWvfmRfm9sKsSd55tLyNxyN5:6+WpDfmRfmhJtL2x25

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  6e04899e5aedf803f192a3717fee75e0N.exe
- Size
  
  75KB
- MD5
  
  6e04899e5aedf803f192a3717fee75e0
- SHA1
  
  8b0b734525cb47da00352a0233b4d50bed7a7b90
- SHA256
  
  27a27cdf80a7a2d61836f7c39e2caa662d81fd79d1b91d15b1b4795db0c0dd25
- SHA512
  
  04b3a335e097d3c4f7b47cecdf9971b333405dfd2fbe54cc812ee47c99a9dbe1f0b2747520f62d465ca3f87c58b15490235a66ab43162a80032940580a36d405
- SSDEEP
  
  1536:W7Z+pApfGQ3y3RWvfmRfm9sKsSd55tLyNxyN5:6+WpDfmRfmhJtL2x25
Score

9^/10

discovery ransomware
- Renames multiple (3139) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware