c31d35961ab05422e7bf97252f5b8b6701e4465041a0041ce51b623edccb9800 | Triage

Sharing

General

Target

5a63d99f3220cb438f33c53080d14590N.exe
Size

37KB
Sample

240817-vez2qaygnr
MD5

5a63d99f3220cb438f33c53080d14590
SHA1

322e6d2f03723655df85686e8c05f06de1764dbd
SHA256

c31d35961ab05422e7bf97252f5b8b6701e4465041a0041ce51b623edccb9800
SHA512

25f74dd8e216150b454e90de78e75784770858f749a8813dec8f885854fbe3ecb34de81e376e9cb62c9cf33b182dc3d27ec067503d2a1fa3c1b45d1987209499
SSDEEP

192:pACU3DIY0Br5xjL/EAgAQmP1oynLb22vB7m/FJHo7m/FJHA9jxje6OMmy6OMmjPk:yBs7Br5xjL8AgA71Fbhv/Fzzwzb

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  5a63d99f3220cb438f33c53080d14590N.exe
- Size
  
  37KB
- MD5
  
  5a63d99f3220cb438f33c53080d14590
- SHA1
  
  322e6d2f03723655df85686e8c05f06de1764dbd
- SHA256
  
  c31d35961ab05422e7bf97252f5b8b6701e4465041a0041ce51b623edccb9800
- SHA512
  
  25f74dd8e216150b454e90de78e75784770858f749a8813dec8f885854fbe3ecb34de81e376e9cb62c9cf33b182dc3d27ec067503d2a1fa3c1b45d1987209499
- SSDEEP
  
  192:pACU3DIY0Br5xjL/EAgAQmP1oynLb22vB7m/FJHo7m/FJHA9jxje6OMmy6OMmjPk:yBs7Br5xjL8AgA71Fbhv/Fzzwzb
Score

9^/10

discovery ransomware
- Renames multiple (3319) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware