e6e8a035b3eaf732074e4ddbc1959886d4bf418de2c0b9406aa53184c469b73f | Triage

Sharing

General

Target

bbaf45725c54d378283cefaf698d8db0N.exe
Size

35KB
Sample

240817-cb7y2s1ara
MD5

bbaf45725c54d378283cefaf698d8db0
SHA1

bee8337ab263d938ba44bf6b30ae7049061be06d
SHA256

e6e8a035b3eaf732074e4ddbc1959886d4bf418de2c0b9406aa53184c469b73f
SHA512

2e925faaa291cc6b851e6e73b5824088212167be1c5b500992f60a46fed61ba376cbcafdc521474271ab6c1b9be9c6ccf2c0a8cedc5d7d7cb1c891ec51c49157
SSDEEP

384:GBt7Br5xjL9AgA71FbhvuNBN2TQ1nrSLmni:W7BlpppARFbhknrSLmi

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  bbaf45725c54d378283cefaf698d8db0N.exe
- Size
  
  35KB
- MD5
  
  bbaf45725c54d378283cefaf698d8db0
- SHA1
  
  bee8337ab263d938ba44bf6b30ae7049061be06d
- SHA256
  
  e6e8a035b3eaf732074e4ddbc1959886d4bf418de2c0b9406aa53184c469b73f
- SHA512
  
  2e925faaa291cc6b851e6e73b5824088212167be1c5b500992f60a46fed61ba376cbcafdc521474271ab6c1b9be9c6ccf2c0a8cedc5d7d7cb1c891ec51c49157
- SSDEEP
  
  384:GBt7Br5xjL9AgA71FbhvuNBN2TQ1nrSLmni:W7BlpppARFbhknrSLmi
Score

9^/10

discovery ransomware
- Renames multiple (3293) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware