e4d88cfde953ddc94d1e93287dd59164c020a9b7e6d627c7afed9a324553b605 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31634e50874c100cd711be0f3a724b50N.exe
Size

45KB
Sample

240807-af9mbsvdqq
MD5

31634e50874c100cd711be0f3a724b50
SHA1

c33787353d5057564b00d65991250786fdf8ef8b
SHA256

e4d88cfde953ddc94d1e93287dd59164c020a9b7e6d627c7afed9a324553b605
SHA512

e41a149c127bde883af5b82cdaea2644313c704b29e8e7b2de2116380d94ae92e807b8df214d915b3c3e7e2cca59a19fe74c222bdb6f3bd0f2c6fc1804e1f534
SSDEEP

384:GBt7Br5xjL9AgA71FbhvuNBNQFrs0AqAJwO1AqAJwOf0VyjVy+:W7BlpppARFbhHFoqAJwBqAJw1VyjVy+

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  31634e50874c100cd711be0f3a724b50N.exe
- Size
  
  45KB
- MD5
  
  31634e50874c100cd711be0f3a724b50
- SHA1
  
  c33787353d5057564b00d65991250786fdf8ef8b
- SHA256
  
  e4d88cfde953ddc94d1e93287dd59164c020a9b7e6d627c7afed9a324553b605
- SHA512
  
  e41a149c127bde883af5b82cdaea2644313c704b29e8e7b2de2116380d94ae92e807b8df214d915b3c3e7e2cca59a19fe74c222bdb6f3bd0f2c6fc1804e1f534
- SSDEEP
  
  384:GBt7Br5xjL9AgA71FbhvuNBNQFrs0AqAJwO1AqAJwOf0VyjVy+:W7BlpppARFbhHFoqAJwBqAJw1VyjVy+
Score

9^/10

discovery ransomware
- Renames multiple (3422) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware