49ef782237cecc5bff7e3e2bcf836000322513fa457e64fe11f5f05f951b4a43 | Triage

Sharing

General

Target

20ebc18bdd545f20d3a29a26e3aa9fb0N.exe
Size

94KB
Sample

240818-3r53havelj
MD5

20ebc18bdd545f20d3a29a26e3aa9fb0
SHA1

8219df6c9d5c36820dbeb7f706a2965062799f56
SHA256

49ef782237cecc5bff7e3e2bcf836000322513fa457e64fe11f5f05f951b4a43
SHA512

d18e30c916bf5caadf6cb9fc3668074cb5aab11199367e3b1e31fea16fa3538be60876675d961c005670b39df750cff0768f7f377d91203df50fdcdef6ef41ec
SSDEEP

1536:W7Z9pApQESOHepOHe8G+6E65dyGdykNdNBK2LUf7XQex2D:69WpQE0zUzXA

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  20ebc18bdd545f20d3a29a26e3aa9fb0N.exe
- Size
  
  94KB
- MD5
  
  20ebc18bdd545f20d3a29a26e3aa9fb0
- SHA1
  
  8219df6c9d5c36820dbeb7f706a2965062799f56
- SHA256
  
  49ef782237cecc5bff7e3e2bcf836000322513fa457e64fe11f5f05f951b4a43
- SHA512
  
  d18e30c916bf5caadf6cb9fc3668074cb5aab11199367e3b1e31fea16fa3538be60876675d961c005670b39df750cff0768f7f377d91203df50fdcdef6ef41ec
- SSDEEP
  
  1536:W7Z9pApQESOHepOHe8G+6E65dyGdykNdNBK2LUf7XQex2D:69WpQE0zUzXA
Score

9^/10

discovery ransomware
- Renames multiple (2922) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware