85a9ac4b8e6d74283f95f2b0bd2d775369e5e2dafe4c7136a201f6445f481df4 | Triage

Sharing

General

Target

5574f6929ffb6a525059837d1625c350N.exe
Size

43KB
Sample

240806-efa6zssgnh
MD5

5574f6929ffb6a525059837d1625c350
SHA1

d99579728736612cf2da15b5172410ce376bc4f5
SHA256

85a9ac4b8e6d74283f95f2b0bd2d775369e5e2dafe4c7136a201f6445f481df4
SHA512

f2d9827017ea2c537a821c8945e5e8c5a63eeb3829ffd6188caddbbe1ce5be684273b3fb6322e346e653b23c13864684d6d09688f44952afdf9c98457a9d34ba
SSDEEP

384:GBt7Br5xjL9AgA71FbhvuNBNQFrs0AqAJwO1AqAJwOfF2JouP2JouQw5A5D:W7BlpppARFbhHFoqAJwBqAJwRJofJoTT

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  5574f6929ffb6a525059837d1625c350N.exe
- Size
  
  43KB
- MD5
  
  5574f6929ffb6a525059837d1625c350
- SHA1
  
  d99579728736612cf2da15b5172410ce376bc4f5
- SHA256
  
  85a9ac4b8e6d74283f95f2b0bd2d775369e5e2dafe4c7136a201f6445f481df4
- SHA512
  
  f2d9827017ea2c537a821c8945e5e8c5a63eeb3829ffd6188caddbbe1ce5be684273b3fb6322e346e653b23c13864684d6d09688f44952afdf9c98457a9d34ba
- SSDEEP
  
  384:GBt7Br5xjL9AgA71FbhvuNBNQFrs0AqAJwO1AqAJwOfF2JouP2JouQw5A5D:W7BlpppARFbhHFoqAJwBqAJwRJofJoTT
Score

9^/10

discovery ransomware
- Renames multiple (3249) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware