a8fb0312c0474426caff47a03a23b7a237e32fa1fe163525e6b365aed06956d5 | Triage

Sharing

General

Target

76c7f3a500a3d42b82595fdcb84b90a0N.exe
Size

42KB
Sample

240802-js6kwashpr
MD5

76c7f3a500a3d42b82595fdcb84b90a0
SHA1

a25a720688bf9ff9bbcdde5356a45495d4b9ac04
SHA256

a8fb0312c0474426caff47a03a23b7a237e32fa1fe163525e6b365aed06956d5
SHA512

93d806bb88e6dba84a5ef5e30717d40dccaf1842ecc20bb7d6694fbcd323fafdf78cf482c2a4fd41aeeafca05837177daea31e3927d47ffdaf239d058740c08f
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfpT4wWJ:W7ZppApBULcfpHLcfp5WJ

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  76c7f3a500a3d42b82595fdcb84b90a0N.exe
- Size
  
  42KB
- MD5
  
  76c7f3a500a3d42b82595fdcb84b90a0
- SHA1
  
  a25a720688bf9ff9bbcdde5356a45495d4b9ac04
- SHA256
  
  a8fb0312c0474426caff47a03a23b7a237e32fa1fe163525e6b365aed06956d5
- SHA512
  
  93d806bb88e6dba84a5ef5e30717d40dccaf1842ecc20bb7d6694fbcd323fafdf78cf482c2a4fd41aeeafca05837177daea31e3927d47ffdaf239d058740c08f
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfpT4wWJ:W7ZppApBULcfpHLcfp5WJ
Score

9^/10

discovery ransomware
- Renames multiple (3437) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware