7ae5041f1b1e47105bed48c1a7792eee5ab0166b53f478540df6860c1e564525 | Triage

Sharing

General

Target

828fc3c2ebeaf0fb3b58109ddf9c3d80N.exe
Size

135KB
Sample

240806-ke19nsycmh
MD5

828fc3c2ebeaf0fb3b58109ddf9c3d80
SHA1

0f753b9f39f2dac6b34b28d7e14fc76532bb2021
SHA256

7ae5041f1b1e47105bed48c1a7792eee5ab0166b53f478540df6860c1e564525
SHA512

a118edc1b807002116abcd1200badc147ac9b547c2068cf900f44454d813b1a8d3fae1fdda8ee5aad3a3fb3e86764c88f4e9938bc319759f91dcf806ba5c3315
SSDEEP

3072:6e7WpHIyRF9ESWu0SWuDmSXrw3Mtr0s8P43C:RqlIyFESWu0SWu2s8P43C

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  828fc3c2ebeaf0fb3b58109ddf9c3d80N.exe
- Size
  
  135KB
- MD5
  
  828fc3c2ebeaf0fb3b58109ddf9c3d80
- SHA1
  
  0f753b9f39f2dac6b34b28d7e14fc76532bb2021
- SHA256
  
  7ae5041f1b1e47105bed48c1a7792eee5ab0166b53f478540df6860c1e564525
- SHA512
  
  a118edc1b807002116abcd1200badc147ac9b547c2068cf900f44454d813b1a8d3fae1fdda8ee5aad3a3fb3e86764c88f4e9938bc319759f91dcf806ba5c3315
- SSDEEP
  
  3072:6e7WpHIyRF9ESWu0SWuDmSXrw3Mtr0s8P43C:RqlIyFESWu0SWu2s8P43C
Score

9^/10

discovery ransomware
- Renames multiple (2661) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware