1dc9124de65d134e4857964907b44df06e8e65cc91da84a64639eb75f84445c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cbbd84871d082b33b2412c8d3a2f61d0N.exe
Size

38KB
Sample

240802-zgtpyayhrr
MD5

cbbd84871d082b33b2412c8d3a2f61d0
SHA1

ed96e2bc006433933a5b963c19cfc4c98ca56a0a
SHA256

1dc9124de65d134e4857964907b44df06e8e65cc91da84a64639eb75f84445c5
SHA512

65e0a1fd60553ad3080c5d9130b8396f33ddec0ab3208f2aaf4b5b889f2234d664f209402bd3af444ade1b0ac33463b2f9c83b08e1d720d8e156c5c9f992f51e
SSDEEP

384:GBt7Br5xjL9A7AgA71Fbhvnqj7jU7ubTAgpbuvx10AaIdKB7ubTAgpbuvx10AaIF:W7BlphA7pARFbhL801VvM801Vvv7WwZJ

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  cbbd84871d082b33b2412c8d3a2f61d0N.exe
- Size
  
  38KB
- MD5
  
  cbbd84871d082b33b2412c8d3a2f61d0
- SHA1
  
  ed96e2bc006433933a5b963c19cfc4c98ca56a0a
- SHA256
  
  1dc9124de65d134e4857964907b44df06e8e65cc91da84a64639eb75f84445c5
- SHA512
  
  65e0a1fd60553ad3080c5d9130b8396f33ddec0ab3208f2aaf4b5b889f2234d664f209402bd3af444ade1b0ac33463b2f9c83b08e1d720d8e156c5c9f992f51e
- SSDEEP
  
  384:GBt7Br5xjL9A7AgA71Fbhvnqj7jU7ubTAgpbuvx10AaIdKB7ubTAgpbuvx10AaIF:W7BlphA7pARFbhL801VvM801Vvv7WwZJ
Score

9^/10

discovery ransomware
- Renames multiple (3224) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware