bd4a1fb8f1ccb0d91eda92eb76c7dc3bd1ac026a3521599f5f219df0a88dd321 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e29f333e1a028bf02683171395756240N.exe
Size

51KB
Sample

240814-d3cgws1bmr
MD5

e29f333e1a028bf02683171395756240
SHA1

48c5291e4f10a031f0f19e1990786cc8be9b01be
SHA256

bd4a1fb8f1ccb0d91eda92eb76c7dc3bd1ac026a3521599f5f219df0a88dd321
SHA512

040e585e95957cd63f8ac466d0f502c3109622716c82767a5d5d72a8cef47abfad6c39fe8c287b5f7cae651ac3ad8f832a49ae49a06210dfaa359d4f5ccdeb21
SSDEEP

768:/7BlpQpARFbhIYJIJDYJIJPfFpsJcFfFpsJcSoxo9:/7ZQpApze+eJfFpsJOfFpsJx

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  e29f333e1a028bf02683171395756240N.exe
- Size
  
  51KB
- MD5
  
  e29f333e1a028bf02683171395756240
- SHA1
  
  48c5291e4f10a031f0f19e1990786cc8be9b01be
- SHA256
  
  bd4a1fb8f1ccb0d91eda92eb76c7dc3bd1ac026a3521599f5f219df0a88dd321
- SHA512
  
  040e585e95957cd63f8ac466d0f502c3109622716c82767a5d5d72a8cef47abfad6c39fe8c287b5f7cae651ac3ad8f832a49ae49a06210dfaa359d4f5ccdeb21
- SSDEEP
  
  768:/7BlpQpARFbhIYJIJDYJIJPfFpsJcFfFpsJcSoxo9:/7ZQpApze+eJfFpsJOfFpsJx
Score

9^/10

discovery ransomware
- Renames multiple (507) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware