b922b4ac0c8f3ec2410a51d599aebf0bc9f73c1d31e9a900b322c4cbf8473b47 | Triage

Sharing

General

Target

2594266ed60e1777b10b804e702eb480N.exe
Size

89KB
Sample

240817-f4cv6asdrj
MD5

2594266ed60e1777b10b804e702eb480
SHA1

0cafc01ec494175af5b1fb2efc9046f4acff5ce9
SHA256

b922b4ac0c8f3ec2410a51d599aebf0bc9f73c1d31e9a900b322c4cbf8473b47
SHA512

d6d87d6d425df29c4fc55d8005b5013c25f1f28cc91fb4beb1db56bb03e10334886382386aafb7ca65d9d25fd0fd40331351c1920dc237d8575261250f126e12
SSDEEP

1536:W7ZppApBE4p6WYcUYcvLG6JLG6tb7ZppApBE4p6WYcUYcvLG6JLG6dW:6pWpB+LGMLGM5pWpB+LGMLG4W

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  2594266ed60e1777b10b804e702eb480N.exe
- Size
  
  89KB
- MD5
  
  2594266ed60e1777b10b804e702eb480
- SHA1
  
  0cafc01ec494175af5b1fb2efc9046f4acff5ce9
- SHA256
  
  b922b4ac0c8f3ec2410a51d599aebf0bc9f73c1d31e9a900b322c4cbf8473b47
- SHA512
  
  d6d87d6d425df29c4fc55d8005b5013c25f1f28cc91fb4beb1db56bb03e10334886382386aafb7ca65d9d25fd0fd40331351c1920dc237d8575261250f126e12
- SSDEEP
  
  1536:W7ZppApBE4p6WYcUYcvLG6JLG6tb7ZppApBE4p6WYcUYcvLG6JLG6dW:6pWpB+LGMLGM5pWpB+LGMLG4W
Score

9^/10

discovery ransomware
- Renames multiple (481) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware