c073de727a89287cf50abb126bfe9dd3cdf7fa540635111f6945bdbb55c69149 | Triage

Sharing

General

Target

6e32943f366ab2685a33c83787075670N.exe
Size

38KB
Sample

240805-kehsbs1ekr
MD5

6e32943f366ab2685a33c83787075670
SHA1

f1f9e1d205c31558c5470a71ee0dc830e7be916a
SHA256

c073de727a89287cf50abb126bfe9dd3cdf7fa540635111f6945bdbb55c69149
SHA512

38581bfb338dc51ae485d691b5ed90ab6ba82323e410e8b8da4d19afba2396589a34b87624eb10cc0486083df2ddfc5ac60feeb120f82c0323bcf16f45046e12
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFjqAJLOqAJLUtO:W7ZppApBULcfpHLcfpyD3tO

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  6e32943f366ab2685a33c83787075670N.exe
- Size
  
  38KB
- MD5
  
  6e32943f366ab2685a33c83787075670
- SHA1
  
  f1f9e1d205c31558c5470a71ee0dc830e7be916a
- SHA256
  
  c073de727a89287cf50abb126bfe9dd3cdf7fa540635111f6945bdbb55c69149
- SHA512
  
  38581bfb338dc51ae485d691b5ed90ab6ba82323e410e8b8da4d19afba2396589a34b87624eb10cc0486083df2ddfc5ac60feeb120f82c0323bcf16f45046e12
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFjqAJLOqAJLUtO:W7ZppApBULcfpHLcfpyD3tO
Score

9^/10

discovery ransomware
- Renames multiple (3343) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware