c77eff773598db457e8f45206a410b0e97242f2e4b077a9b6620f54e53b332f7 | Triage

Sharing

General

Target

3849bf72e3fd1c8577cafa0d75648d60N.exe
Size

52KB
Sample

240814-md1mvswhrc
MD5

3849bf72e3fd1c8577cafa0d75648d60
SHA1

d57c04ac813ff1a5ed633c1f0f9ce62cbb1e4e49
SHA256

c77eff773598db457e8f45206a410b0e97242f2e4b077a9b6620f54e53b332f7
SHA512

7af40b2d60f5de8b399e560b38fccfc9d06c5548e5acfcc8b020b55388ef464129879f44da27fa4961c8bcaa88f6fab782d24300703828d611c17fbc0792929a
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFY101g3B3WnSdWTW4:W7ZppApBULcfpHLcfpyDrnSdWTW4

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  3849bf72e3fd1c8577cafa0d75648d60N.exe
- Size
  
  52KB
- MD5
  
  3849bf72e3fd1c8577cafa0d75648d60
- SHA1
  
  d57c04ac813ff1a5ed633c1f0f9ce62cbb1e4e49
- SHA256
  
  c77eff773598db457e8f45206a410b0e97242f2e4b077a9b6620f54e53b332f7
- SHA512
  
  7af40b2d60f5de8b399e560b38fccfc9d06c5548e5acfcc8b020b55388ef464129879f44da27fa4961c8bcaa88f6fab782d24300703828d611c17fbc0792929a
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFY101g3B3WnSdWTW4:W7ZppApBULcfpHLcfpyDrnSdWTW4
Score

9^/10

discovery ransomware
- Renames multiple (435) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware