21e2b5a3029f7546c3ba5b5ddbb4f556f61bd01bca388b1d4cc777c8191f1491 | Triage

Sharing

General

Target

618be22bec66081eb95b4dc1369c33a0N.exe
Size

88KB
Sample

240814-vbtqjasfqd
MD5

618be22bec66081eb95b4dc1369c33a0
SHA1

b50da6bc55e0bbf25c84a693433b5a2d89bc55be
SHA256

21e2b5a3029f7546c3ba5b5ddbb4f556f61bd01bca388b1d4cc777c8191f1491
SHA512

0733b622ee01f0b12263f163812e598586d418745b39bcc4dfe79e5b473e1aeed24ebdcd9f831cc3b244ef67f9619629151989b8cefdebe6a557f009c286201c
SSDEEP

1536:W7ZhA7pApH9QHwtRF9ESWu0SWutlggalggyaRjvmujvmRzqzlmJgwmJg/S7:6e7WpHIyRF9ESWu0SWuDm841qa

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  618be22bec66081eb95b4dc1369c33a0N.exe
- Size
  
  88KB
- MD5
  
  618be22bec66081eb95b4dc1369c33a0
- SHA1
  
  b50da6bc55e0bbf25c84a693433b5a2d89bc55be
- SHA256
  
  21e2b5a3029f7546c3ba5b5ddbb4f556f61bd01bca388b1d4cc777c8191f1491
- SHA512
  
  0733b622ee01f0b12263f163812e598586d418745b39bcc4dfe79e5b473e1aeed24ebdcd9f831cc3b244ef67f9619629151989b8cefdebe6a557f009c286201c
- SSDEEP
  
  1536:W7ZhA7pApH9QHwtRF9ESWu0SWutlggalggyaRjvmujvmRzqzlmJgwmJg/S7:6e7WpHIyRF9ESWu0SWuDm841qa
Score

9^/10

discovery ransomware
- Renames multiple (3188) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware