3f52e2354cdc8ea29241752aa30bc4afdfee7930bc7469cb9b4b478c5952f3ed | Triage

Sharing

General

Target

ce45c4f43c72f45a57b5b9a78a59ab40N.exe
Size

38KB
Sample

240816-3ga5datfpf
MD5

ce45c4f43c72f45a57b5b9a78a59ab40
SHA1

b5c329015b9846fad677ea25052b93d405ede242
SHA256

3f52e2354cdc8ea29241752aa30bc4afdfee7930bc7469cb9b4b478c5952f3ed
SHA512

961a214e56ea6598d7989f94ba15704fe5eecee19df6e5b029d7aa9518f0f7baa1f2ed102143bba0ec52959163c120b091a7e2e2e4e0d947f9eb50764c8517cb
SSDEEP

192:pACU3DIY0Br5xjL/EAgAQmP1oynLb22vB7m/FJHo7m/FJHdGeqc4SUqUGeqc4SUy:yBs7Br5xjL8AgA71Fbhva4S04St

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  ce45c4f43c72f45a57b5b9a78a59ab40N.exe
- Size
  
  38KB
- MD5
  
  ce45c4f43c72f45a57b5b9a78a59ab40
- SHA1
  
  b5c329015b9846fad677ea25052b93d405ede242
- SHA256
  
  3f52e2354cdc8ea29241752aa30bc4afdfee7930bc7469cb9b4b478c5952f3ed
- SHA512
  
  961a214e56ea6598d7989f94ba15704fe5eecee19df6e5b029d7aa9518f0f7baa1f2ed102143bba0ec52959163c120b091a7e2e2e4e0d947f9eb50764c8517cb
- SSDEEP
  
  192:pACU3DIY0Br5xjL/EAgAQmP1oynLb22vB7m/FJHo7m/FJHdGeqc4SUqUGeqc4SUy:yBs7Br5xjL8AgA71Fbhva4S04St
Score

9^/10

discovery ransomware
- Renames multiple (2835) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware