7d68d4e282d3be52889192e45d5b6a36dba4e487e2ff86cfcb708a31207c5374 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85c2b69a9fded1f71f42c66aa53008e0N.exe
Size

98KB
Sample

240802-lc29mayfja
MD5

85c2b69a9fded1f71f42c66aa53008e0
SHA1

c094088471066a5d9b3f6db4463f779115fbc4e7
SHA256

7d68d4e282d3be52889192e45d5b6a36dba4e487e2ff86cfcb708a31207c5374
SHA512

502d9ec0496d89edd4bfba5e01f94c4c84b31650468892d0ab8f4a1683a4f65a848b0cd8ad0e23ac235a8d286922e905a693387b11bffa553f911a9f2d8f4df1
SSDEEP

3072:6e7WpMaxeb0CYJ97lEYNR73e+eKZOf7fv:RqKvb0CYJ973e+eKZOf7fv

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  85c2b69a9fded1f71f42c66aa53008e0N.exe
- Size
  
  98KB
- MD5
  
  85c2b69a9fded1f71f42c66aa53008e0
- SHA1
  
  c094088471066a5d9b3f6db4463f779115fbc4e7
- SHA256
  
  7d68d4e282d3be52889192e45d5b6a36dba4e487e2ff86cfcb708a31207c5374
- SHA512
  
  502d9ec0496d89edd4bfba5e01f94c4c84b31650468892d0ab8f4a1683a4f65a848b0cd8ad0e23ac235a8d286922e905a693387b11bffa553f911a9f2d8f4df1
- SSDEEP
  
  3072:6e7WpMaxeb0CYJ97lEYNR73e+eKZOf7fv:RqKvb0CYJ973e+eKZOf7fv
Score

9^/10

discovery ransomware
- Renames multiple (3098) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware