c975d29e2b2a1072e4c4aa8c1511cbdcb11441bf2ba2029d8e6f04e75ac4978f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e00226cdf8b696f1f01e173e91efae0N.exe
Size

59KB
Sample

240807-bqlhxszfpd
MD5

3e00226cdf8b696f1f01e173e91efae0
SHA1

2cdcec281787a8dcde457e58ecfadcd547316d6a
SHA256

c975d29e2b2a1072e4c4aa8c1511cbdcb11441bf2ba2029d8e6f04e75ac4978f
SHA512

484b5baecc3ecdd63ee4296e901e7721243af08a4fe23a6b37a772beb257fef65782d5ad713bff15bce0500b9cca6d3a001b28fe0055351315d85be86ad81ba3
SSDEEP

768:/7BlpQpARFbhIYJIJDYJIJxfFpsJcEKLF/MF/28HaT9PP9Po3b:/7ZQpApze+ejfFpsJPKZ2e8HaT96

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  3e00226cdf8b696f1f01e173e91efae0N.exe
- Size
  
  59KB
- MD5
  
  3e00226cdf8b696f1f01e173e91efae0
- SHA1
  
  2cdcec281787a8dcde457e58ecfadcd547316d6a
- SHA256
  
  c975d29e2b2a1072e4c4aa8c1511cbdcb11441bf2ba2029d8e6f04e75ac4978f
- SHA512
  
  484b5baecc3ecdd63ee4296e901e7721243af08a4fe23a6b37a772beb257fef65782d5ad713bff15bce0500b9cca6d3a001b28fe0055351315d85be86ad81ba3
- SSDEEP
  
  768:/7BlpQpARFbhIYJIJDYJIJxfFpsJcEKLF/MF/28HaT9PP9Po3b:/7ZQpApze+ejfFpsJPKZ2e8HaT96
Score

9^/10

discovery ransomware
- Renames multiple (430) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware