d4e517bc0dcc71e4e2c06e25bb735c398fd687c7f1759ccc92945e3bda190667 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d8d8a8348f8b227b7bbe13e97e721670N.exe
Size

48KB
Sample

240814-e7kvha1gmn
MD5

d8d8a8348f8b227b7bbe13e97e721670
SHA1

00f009b6b2c65c3d8753cfdab18a04226ae94262
SHA256

d4e517bc0dcc71e4e2c06e25bb735c398fd687c7f1759ccc92945e3bda190667
SHA512

58c73542c2aaaee9e850c185100f44bbfe07185de007157b07032f2ce0d9e49ae71940be8c6d2068c5374a1e8567505aa8c1aa9cd094559c7e44f9037f308367
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFXpK5c5hIGt:W7ZppApBULcfpHLcfpyDA67Ig

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  d8d8a8348f8b227b7bbe13e97e721670N.exe
- Size
  
  48KB
- MD5
  
  d8d8a8348f8b227b7bbe13e97e721670
- SHA1
  
  00f009b6b2c65c3d8753cfdab18a04226ae94262
- SHA256
  
  d4e517bc0dcc71e4e2c06e25bb735c398fd687c7f1759ccc92945e3bda190667
- SHA512
  
  58c73542c2aaaee9e850c185100f44bbfe07185de007157b07032f2ce0d9e49ae71940be8c6d2068c5374a1e8567505aa8c1aa9cd094559c7e44f9037f308367
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFXpK5c5hIGt:W7ZppApBULcfpHLcfpyDA67Ig
Score

9^/10

discovery ransomware
- Renames multiple (3438) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware