9b19aff7db0166f683a81a79e94b246f4a8a4d5c3adbdcf59ebd70a50582716b | Triage

Sharing

General

Target

2d9687a52e539d13059d258302daf130N.exe
Size

40KB
Sample

240818-amsbmavejc
MD5

2d9687a52e539d13059d258302daf130
SHA1

89a2f76fc9610bc82c21600eed71f12bfda31aaa
SHA256

9b19aff7db0166f683a81a79e94b246f4a8a4d5c3adbdcf59ebd70a50582716b
SHA512

67b558a50fd3033059f8c7f2799ae7b95a03dfc69670aaa68c1f0314eb70336d2e8409ca38a75151040f1335b76eeb085a47d798c4f20e24b88cc0b879429297
SSDEEP

192:pACU3DIY0Br5xjL/EAgAQmP1oynLb22vB7m/FJHo7m/FJHA9jxje6OMmy6OMmIkw:yBs7Br5xjL8AgA71Fbhv/Fzzwz7H

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  2d9687a52e539d13059d258302daf130N.exe
- Size
  
  40KB
- MD5
  
  2d9687a52e539d13059d258302daf130
- SHA1
  
  89a2f76fc9610bc82c21600eed71f12bfda31aaa
- SHA256
  
  9b19aff7db0166f683a81a79e94b246f4a8a4d5c3adbdcf59ebd70a50582716b
- SHA512
  
  67b558a50fd3033059f8c7f2799ae7b95a03dfc69670aaa68c1f0314eb70336d2e8409ca38a75151040f1335b76eeb085a47d798c4f20e24b88cc0b879429297
- SSDEEP
  
  192:pACU3DIY0Br5xjL/EAgAQmP1oynLb22vB7m/FJHo7m/FJHA9jxje6OMmy6OMmIkw:yBs7Br5xjL8AgA71Fbhv/Fzzwz7H
Score

9^/10

discovery ransomware
- Renames multiple (3235) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware