d8e2764e3158552947f60e2ed56deac74f2f79dc192273dfd76e1b9dcbee43eb | Triage

Sharing

General

Target

597833f5bef1b2e3335e165c2a4f3600N.exe
Size

87KB
Sample

240818-1ret7swgke
MD5

597833f5bef1b2e3335e165c2a4f3600
SHA1

4e5230c141c9f97c0c6d671dc83c3e4c79f4cf83
SHA256

d8e2764e3158552947f60e2ed56deac74f2f79dc192273dfd76e1b9dcbee43eb
SHA512

475e539e9b1fc7ce3dccce3288671c16128c438d81f75fd12ece6deb2a9962b64b6f1c026826e69cd78e5625e07cc10e61e82c7e94bae898e72ce5f582294842
SSDEEP

1536:W7ZhA7pApMaxB4b0CYJ97lEVqNR7Yge+eTdsdYSWXB8:6e7WpMaxeb0CYJ97lEYNR73e+eBSWXB8

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  597833f5bef1b2e3335e165c2a4f3600N.exe
- Size
  
  87KB
- MD5
  
  597833f5bef1b2e3335e165c2a4f3600
- SHA1
  
  4e5230c141c9f97c0c6d671dc83c3e4c79f4cf83
- SHA256
  
  d8e2764e3158552947f60e2ed56deac74f2f79dc192273dfd76e1b9dcbee43eb
- SHA512
  
  475e539e9b1fc7ce3dccce3288671c16128c438d81f75fd12ece6deb2a9962b64b6f1c026826e69cd78e5625e07cc10e61e82c7e94bae898e72ce5f582294842
- SSDEEP
  
  1536:W7ZhA7pApMaxB4b0CYJ97lEVqNR7Yge+eTdsdYSWXB8:6e7WpMaxeb0CYJ97lEYNR73e+eBSWXB8
Score

9^/10

discovery ransomware
- Renames multiple (2946) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware