e5d043b8bf14462558a01ce046c01232c6d2fc6d86c6e297039986bf7375700a | Triage

Sharing

General

Target

a531f07d063b39a2f7b3eaaa46905770N.exe
Size

36KB
Sample

240818-ek4zvsthla
MD5

a531f07d063b39a2f7b3eaaa46905770
SHA1

a68d50c3c875b0750646bea52d62d66df43fa540
SHA256

e5d043b8bf14462558a01ce046c01232c6d2fc6d86c6e297039986bf7375700a
SHA512

67c8398deeff5109fd7432ed7b672de64a0c912b5e15c523b27ee7a5727418dbb2a63b2375b35ebe6860981d1d24316ff986e6d85fa47eaad5913e223111bcff
SSDEEP

384:GBt7Br5xjL9AgA71Fbhv7bhv3KueKudLl++KKdXdZEj:W7BlpppARFbhjbhPKueKudLw1KN6

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  a531f07d063b39a2f7b3eaaa46905770N.exe
- Size
  
  36KB
- MD5
  
  a531f07d063b39a2f7b3eaaa46905770
- SHA1
  
  a68d50c3c875b0750646bea52d62d66df43fa540
- SHA256
  
  e5d043b8bf14462558a01ce046c01232c6d2fc6d86c6e297039986bf7375700a
- SHA512
  
  67c8398deeff5109fd7432ed7b672de64a0c912b5e15c523b27ee7a5727418dbb2a63b2375b35ebe6860981d1d24316ff986e6d85fa47eaad5913e223111bcff
- SSDEEP
  
  384:GBt7Br5xjL9AgA71Fbhv7bhv3KueKudLl++KKdXdZEj:W7BlpppARFbhjbhPKueKudLw1KN6
Score

9^/10

discovery ransomware
- Renames multiple (3370) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware