4baf095bf78123f73f19d5078c478f0fb2f32bc100d4eaaa81cc8e2e710e3abf | Triage

Sharing

General

Target

2668b14d5865c9eb3a76c920fb312670N.exe
Size

39KB
Sample

240813-ttkpxaydmr
MD5

2668b14d5865c9eb3a76c920fb312670
SHA1

10bc1c0471495410bbc59cc9adc4a7496d9c2a57
SHA256

4baf095bf78123f73f19d5078c478f0fb2f32bc100d4eaaa81cc8e2e710e3abf
SHA512

f40493d35b9c4f85f2fbfe1743d365c4e694cec12acadbeb47409213e108d95c020d0186adc849987a517d482db52ab0aa2035b21b3bc8104860940e8cbf3852
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42Lcfpb2N231F1j1AJh1AJA:W7ZppApBULcfpHLcfpSo3fS

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  2668b14d5865c9eb3a76c920fb312670N.exe
- Size
  
  39KB
- MD5
  
  2668b14d5865c9eb3a76c920fb312670
- SHA1
  
  10bc1c0471495410bbc59cc9adc4a7496d9c2a57
- SHA256
  
  4baf095bf78123f73f19d5078c478f0fb2f32bc100d4eaaa81cc8e2e710e3abf
- SHA512
  
  f40493d35b9c4f85f2fbfe1743d365c4e694cec12acadbeb47409213e108d95c020d0186adc849987a517d482db52ab0aa2035b21b3bc8104860940e8cbf3852
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42Lcfpb2N231F1j1AJh1AJA:W7ZppApBULcfpHLcfpSo3fS
Score

9^/10

discovery ransomware
- Renames multiple (3293) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware