43f2345c4713fbfa1b143c7c6f607fe5b2ed16a7b03bacfeaea31b335450cb17 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02a15665e08aae16bdfa6669fecbe410N.exe
Size

45KB
Sample

240814-x5cefsvckj
MD5

02a15665e08aae16bdfa6669fecbe410
SHA1

18ac23b2c2148bf81db5bffd086a043e1403b7f6
SHA256

43f2345c4713fbfa1b143c7c6f607fe5b2ed16a7b03bacfeaea31b335450cb17
SHA512

3bae9fd2a7fdad99fdb961f5b25371abd4bafa046ea2cd1e956d52bef7012ffc969a5cf9d4c83bcbb746d9c096c60d00a33b6863f2d1b42481883e5cd9c5f7af
SSDEEP

384:yBs7Br5xjL8AgA71Fbhv/FzzwzscucgFQ:/7BlpQpARFbhNIyFQ

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  02a15665e08aae16bdfa6669fecbe410N.exe
- Size
  
  45KB
- MD5
  
  02a15665e08aae16bdfa6669fecbe410
- SHA1
  
  18ac23b2c2148bf81db5bffd086a043e1403b7f6
- SHA256
  
  43f2345c4713fbfa1b143c7c6f607fe5b2ed16a7b03bacfeaea31b335450cb17
- SHA512
  
  3bae9fd2a7fdad99fdb961f5b25371abd4bafa046ea2cd1e956d52bef7012ffc969a5cf9d4c83bcbb746d9c096c60d00a33b6863f2d1b42481883e5cd9c5f7af
- SSDEEP
  
  384:yBs7Br5xjL8AgA71Fbhv/FzzwzscucgFQ:/7BlpQpARFbhNIyFQ
Score

9^/10

discovery ransomware
- Renames multiple (3390) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware