12664f97c15e5defec036aaf9ea7655f2439a95ea181abeb16340b3e0ae97a75 | Triage

Sharing

General

Target

c26a9f12a25abec013564181066baef0N.exe
Size

47KB
Sample

240818-ecwcrawgmr
MD5

c26a9f12a25abec013564181066baef0
SHA1

6c6608d6a64106e8e71f75c5ee13a7e2d183f7c7
SHA256

12664f97c15e5defec036aaf9ea7655f2439a95ea181abeb16340b3e0ae97a75
SHA512

966e88deaffeea1824db08f06ac0252febd9541df1812d22031a5d69b4f15cd6c60acc5d7acc829233c83b1efa817b3df92011a7cd8db6107ba9bb8ffab54fbc
SSDEEP

768:W7BlphA7pARFbhL801VvM801Vvv7cY6SpSo:W7ZhA7pApw03vR03v4Yd4o

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  c26a9f12a25abec013564181066baef0N.exe
- Size
  
  47KB
- MD5
  
  c26a9f12a25abec013564181066baef0
- SHA1
  
  6c6608d6a64106e8e71f75c5ee13a7e2d183f7c7
- SHA256
  
  12664f97c15e5defec036aaf9ea7655f2439a95ea181abeb16340b3e0ae97a75
- SHA512
  
  966e88deaffeea1824db08f06ac0252febd9541df1812d22031a5d69b4f15cd6c60acc5d7acc829233c83b1efa817b3df92011a7cd8db6107ba9bb8ffab54fbc
- SSDEEP
  
  768:W7BlphA7pARFbhL801VvM801Vvv7cY6SpSo:W7ZhA7pApw03vR03v4Yd4o
Score

9^/10

discovery ransomware
- Renames multiple (3273) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware