26a87779d2734097ca5a0ecc359b08aa1a168f452992932fb3d70483afd1c8ae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a4655c17ab1fb3fdca625f0f1690fc0N.exe
Size

61KB
Sample

240817-3dkjmstale
MD5

2a4655c17ab1fb3fdca625f0f1690fc0
SHA1

f9929ce5e20f4091e321519bbc87cfb737d36819
SHA256

26a87779d2734097ca5a0ecc359b08aa1a168f452992932fb3d70483afd1c8ae
SHA512

eec01206acf008003dff11d6e44413c2cb8c851dbba747a19248cf6418d3152ee77f44ea6c6f46baf37fed5b91ef0b0c17a57acd0d425517e91538fdb50c744f
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfpVF/MF/3Nw/Nwk0cEMdV8IEMdV85//hAnJIV:W7ZppApBULcfpHLcfpX2/Nw/Nwmxm

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  2a4655c17ab1fb3fdca625f0f1690fc0N.exe
- Size
  
  61KB
- MD5
  
  2a4655c17ab1fb3fdca625f0f1690fc0
- SHA1
  
  f9929ce5e20f4091e321519bbc87cfb737d36819
- SHA256
  
  26a87779d2734097ca5a0ecc359b08aa1a168f452992932fb3d70483afd1c8ae
- SHA512
  
  eec01206acf008003dff11d6e44413c2cb8c851dbba747a19248cf6418d3152ee77f44ea6c6f46baf37fed5b91ef0b0c17a57acd0d425517e91538fdb50c744f
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfpVF/MF/3Nw/Nwk0cEMdV8IEMdV85//hAnJIV:W7ZppApBULcfpHLcfpX2/Nw/Nwmxm
Score

9^/10

discovery ransomware
- Renames multiple (3143) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware