283f1a68541afa8e7bd1f246e2533fcff34afd356b4187c1d2dd0c57fcf5e621 | Triage

Sharing

General

Target

2385bf2a5f47df473bb4a0e309077780N.exe
Size

35KB
Sample

240805-3gc9qswbld
MD5

2385bf2a5f47df473bb4a0e309077780
SHA1

5666ef70803b8fe7958b92b31e06901665151aff
SHA256

283f1a68541afa8e7bd1f246e2533fcff34afd356b4187c1d2dd0c57fcf5e621
SHA512

415df1a38c7bfa937e4a88ecb163147be9316f7e8dc4978b33b05375518caedce1383b8104c341c0dc2c16f91a248c5cf5f98dd3a7c21490a692cb028e75d222
SSDEEP

192:pACU3DIY0Br5xjL/EAgAQmP1oynLb22vB7m/FJHo7m/FJHA9jxje6OMmy6OMmWY9:yBs7Br5xjL8AgA71Fbhv/FzzwzZG

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  2385bf2a5f47df473bb4a0e309077780N.exe
- Size
  
  35KB
- MD5
  
  2385bf2a5f47df473bb4a0e309077780
- SHA1
  
  5666ef70803b8fe7958b92b31e06901665151aff
- SHA256
  
  283f1a68541afa8e7bd1f246e2533fcff34afd356b4187c1d2dd0c57fcf5e621
- SHA512
  
  415df1a38c7bfa937e4a88ecb163147be9316f7e8dc4978b33b05375518caedce1383b8104c341c0dc2c16f91a248c5cf5f98dd3a7c21490a692cb028e75d222
- SSDEEP
  
  192:pACU3DIY0Br5xjL/EAgAQmP1oynLb22vB7m/FJHo7m/FJHA9jxje6OMmy6OMmWY9:yBs7Br5xjL8AgA71Fbhv/FzzwzZG
Score

9^/10

discovery ransomware
- Renames multiple (3449) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware