3b87965ddcb896d891418126ae95251e1494e22a9c988a4bd49da7642a6ab73b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1414281f9ee4f929dcd67ad804f85f30N.exe
Size

86KB
Sample

240818-d698bstbld
MD5

1414281f9ee4f929dcd67ad804f85f30
SHA1

a3a185f33f49a605e2d0b034b83fca39cac3793d
SHA256

3b87965ddcb896d891418126ae95251e1494e22a9c988a4bd49da7642a6ab73b
SHA512

7a66bcf20fcceb99925c5279b00e725be96c54f429141bb351906e07119c91dced2076d87a8da1e7c8fcaf2bed346a2fef4b9c6b148af10aa6b1287c64793d2f
SSDEEP

1536:W7ZppApUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFsAcEhF:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsM

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  1414281f9ee4f929dcd67ad804f85f30N.exe
- Size
  
  86KB
- MD5
  
  1414281f9ee4f929dcd67ad804f85f30
- SHA1
  
  a3a185f33f49a605e2d0b034b83fca39cac3793d
- SHA256
  
  3b87965ddcb896d891418126ae95251e1494e22a9c988a4bd49da7642a6ab73b
- SHA512
  
  7a66bcf20fcceb99925c5279b00e725be96c54f429141bb351906e07119c91dced2076d87a8da1e7c8fcaf2bed346a2fef4b9c6b148af10aa6b1287c64793d2f
- SSDEEP
  
  1536:W7ZppApUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFsAcEhF:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsM
Score

9^/10

discovery ransomware
- Renames multiple (2969) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware