f2067d8daed0452c7faf8d457c9dacd0ef68c86c2fbf195add48d0bd21522454 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e29476e37bf08c13bd10ee71abf6de0N.exe
Size

43KB
Sample

240813-s9x5hasdpb
MD5

8e29476e37bf08c13bd10ee71abf6de0
SHA1

b5d68f08d54fc33b3e83101931028f29ab27a9f2
SHA256

f2067d8daed0452c7faf8d457c9dacd0ef68c86c2fbf195add48d0bd21522454
SHA512

9a2f9c4806ea810f01131a3460104bb768bf05c8f8971d2b5c51237baeaaebf77af115dc5bfcb736002acc0f298a5bb54d98630128293fbbde2cb83f45731457
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFjqAJLOqAJLkE5KnKg:W7ZppApBULcfpHLcfpyDVKg

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  8e29476e37bf08c13bd10ee71abf6de0N.exe
- Size
  
  43KB
- MD5
  
  8e29476e37bf08c13bd10ee71abf6de0
- SHA1
  
  b5d68f08d54fc33b3e83101931028f29ab27a9f2
- SHA256
  
  f2067d8daed0452c7faf8d457c9dacd0ef68c86c2fbf195add48d0bd21522454
- SHA512
  
  9a2f9c4806ea810f01131a3460104bb768bf05c8f8971d2b5c51237baeaaebf77af115dc5bfcb736002acc0f298a5bb54d98630128293fbbde2cb83f45731457
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFjqAJLOqAJLkE5KnKg:W7ZppApBULcfpHLcfpyDVKg
Score

9^/10

discovery ransomware
- Renames multiple (3317) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware