5d11f38c1f79bec81847f6bf43bddb3ce9b524b3faf5985233d77f50912a753b | Triage

Sharing

General

Target

27f792b5c75995cf7171f735aaf31660N.exe
Size

37KB
Sample

240803-a66ncsxcpl
MD5

27f792b5c75995cf7171f735aaf31660
SHA1

ebdb1dfed136902710fd0e207c8f54e4e1e17599
SHA256

5d11f38c1f79bec81847f6bf43bddb3ce9b524b3faf5985233d77f50912a753b
SHA512

1fddc31968dc07d33d88490b1936c89e31a6695f1d925fc656ed139071485f7d477c05e1a514b3d796bd9e8a7bc5873159aa40d14f9201d3f08e25aaff5b88e9
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42Lcfpb2N231F1h:W7ZppApBULcfpHLcfpSo3fP

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  27f792b5c75995cf7171f735aaf31660N.exe
- Size
  
  37KB
- MD5
  
  27f792b5c75995cf7171f735aaf31660
- SHA1
  
  ebdb1dfed136902710fd0e207c8f54e4e1e17599
- SHA256
  
  5d11f38c1f79bec81847f6bf43bddb3ce9b524b3faf5985233d77f50912a753b
- SHA512
  
  1fddc31968dc07d33d88490b1936c89e31a6695f1d925fc656ed139071485f7d477c05e1a514b3d796bd9e8a7bc5873159aa40d14f9201d3f08e25aaff5b88e9
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42Lcfpb2N231F1h:W7ZppApBULcfpHLcfpSo3fP
Score

9^/10

discovery ransomware
- Renames multiple (3214) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware