0160eec47fe7f027a15487ec4db1a0aca4a6b76a376eccef5322a786469257b4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d8290a7e558948eec1da941aa0e5b4c0N.exe
Size

192KB
Sample

240814-g1cxessfrm
MD5

d8290a7e558948eec1da941aa0e5b4c0
SHA1

ccf7faafaf59ae398707c6ba4cadc24ce218da08
SHA256

0160eec47fe7f027a15487ec4db1a0aca4a6b76a376eccef5322a786469257b4
SHA512

8100eaa4def7b12cd7c50335bc9bd4f9a4f323609db06a98162dde94e71a7e4fffa380768ea244ba569514555ec989460d28004fb6c6e907fe2bef2f0785315e
SSDEEP

3072:6e7WpMNca3rytOkWpXfnYRl2l/9HSFHzJ0lBJTzkG:RqKB+tOkWKR0iJ0lTzkG

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  d8290a7e558948eec1da941aa0e5b4c0N.exe
- Size
  
  192KB
- MD5
  
  d8290a7e558948eec1da941aa0e5b4c0
- SHA1
  
  ccf7faafaf59ae398707c6ba4cadc24ce218da08
- SHA256
  
  0160eec47fe7f027a15487ec4db1a0aca4a6b76a376eccef5322a786469257b4
- SHA512
  
  8100eaa4def7b12cd7c50335bc9bd4f9a4f323609db06a98162dde94e71a7e4fffa380768ea244ba569514555ec989460d28004fb6c6e907fe2bef2f0785315e
- SSDEEP
  
  3072:6e7WpMNca3rytOkWpXfnYRl2l/9HSFHzJ0lBJTzkG:RqKB+tOkWKR0iJ0lTzkG
Score

9^/10

discovery ransomware
- Renames multiple (2852) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware