e30373da8e4bfff25a14316692d0c67c0e37e974eb8e05dcc73a5aa020354d96 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

92756167b95b894dbe6a689d4a1f5c50N.exe
Size

47KB
Sample

240818-a88kqszalp
MD5

92756167b95b894dbe6a689d4a1f5c50
SHA1

c8f3e3d262e1e18dd642e29a65dfa317799e5956
SHA256

e30373da8e4bfff25a14316692d0c67c0e37e974eb8e05dcc73a5aa020354d96
SHA512

e1da9367af35829b1d587e58d3df3709b37653938d307c47a5fdd5be41b1ca3852d0ca929274146160e1256262e43678ae798b14d3e962b1edee23c2fd3d7c15
SSDEEP

768:W7BlphA7pARFbhL801VvM801Vvv7cYl7+obSfxDsT7+obSfxDso:W7ZhA7pApw03vR03v4YV+obSfxDsH+oS

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  92756167b95b894dbe6a689d4a1f5c50N.exe
- Size
  
  47KB
- MD5
  
  92756167b95b894dbe6a689d4a1f5c50
- SHA1
  
  c8f3e3d262e1e18dd642e29a65dfa317799e5956
- SHA256
  
  e30373da8e4bfff25a14316692d0c67c0e37e974eb8e05dcc73a5aa020354d96
- SHA512
  
  e1da9367af35829b1d587e58d3df3709b37653938d307c47a5fdd5be41b1ca3852d0ca929274146160e1256262e43678ae798b14d3e962b1edee23c2fd3d7c15
- SSDEEP
  
  768:W7BlphA7pARFbhL801VvM801Vvv7cYl7+obSfxDsT7+obSfxDso:W7ZhA7pApw03vR03v4YV+obSfxDsH+oS
Score

9^/10

discovery ransomware
- Renames multiple (3276) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware