a2b4815f7851dede8afd3996a633b737e4d92c9576d7c3832bde454c7beabfbc | Triage

Sharing

General

Target

825d14dc71a4be039591493acc92f780N.exe
Size

59KB
Sample

240805-mz94estgpj
MD5

825d14dc71a4be039591493acc92f780
SHA1

15d877f0ce39adc968360993a4ab50b4fcc528dd
SHA256

a2b4815f7851dede8afd3996a633b737e4d92c9576d7c3832bde454c7beabfbc
SHA512

b9c91f2e34ea0b2240b68e34243792aa02f4718438ab747b639573beeb5223f53ad655d9292e1d3a8c2e09baadc2ce029ed3f4625d2b426581e1d7d5d34a1bc3
SSDEEP

768:W7BlphA7pARFbhOm0CAbLgsNCSNC0K+R8PERuV3u5jwhh/EPP/E+vWi+/E+vWiDv:W7ZhA7pApH16m3ueTg/fu/fj

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  825d14dc71a4be039591493acc92f780N.exe
- Size
  
  59KB
- MD5
  
  825d14dc71a4be039591493acc92f780
- SHA1
  
  15d877f0ce39adc968360993a4ab50b4fcc528dd
- SHA256
  
  a2b4815f7851dede8afd3996a633b737e4d92c9576d7c3832bde454c7beabfbc
- SHA512
  
  b9c91f2e34ea0b2240b68e34243792aa02f4718438ab747b639573beeb5223f53ad655d9292e1d3a8c2e09baadc2ce029ed3f4625d2b426581e1d7d5d34a1bc3
- SSDEEP
  
  768:W7BlphA7pARFbhOm0CAbLgsNCSNC0K+R8PERuV3u5jwhh/EPP/E+vWi+/E+vWiDv:W7ZhA7pApH16m3ueTg/fu/fj
Score

9^/10

discovery ransomware
- Renames multiple (3321) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware