a7d934037676ddb9b51666b4acc320ad0212e4a0b63940e48b94a023cbf3c9da | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30943815ad25f949357fd708aa07d5d0N.exe
Size

167KB
Sample

240807-aejphsvdml
MD5

30943815ad25f949357fd708aa07d5d0
SHA1

d9d420a84e5c7c0c38c0181bcbd2772f9a016a20
SHA256

a7d934037676ddb9b51666b4acc320ad0212e4a0b63940e48b94a023cbf3c9da
SHA512

760f85e5ed081f0209c48047101e86048d1280aba7a4251bc0f591258515a2193b05ba89f249c50b4805162d023893e0fd7c9c52970570a43dd034e5ae90cedc
SSDEEP

3072:6e7WpMNca3rytOkWpXfnYRl2l/9HSFHzJ0lBX:RqKB+tOkWKR0iJ0j

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  30943815ad25f949357fd708aa07d5d0N.exe
- Size
  
  167KB
- MD5
  
  30943815ad25f949357fd708aa07d5d0
- SHA1
  
  d9d420a84e5c7c0c38c0181bcbd2772f9a016a20
- SHA256
  
  a7d934037676ddb9b51666b4acc320ad0212e4a0b63940e48b94a023cbf3c9da
- SHA512
  
  760f85e5ed081f0209c48047101e86048d1280aba7a4251bc0f591258515a2193b05ba89f249c50b4805162d023893e0fd7c9c52970570a43dd034e5ae90cedc
- SSDEEP
  
  3072:6e7WpMNca3rytOkWpXfnYRl2l/9HSFHzJ0lBX:RqKB+tOkWKR0iJ0j
Score

9^/10

discovery ransomware
- Renames multiple (2650) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware