17e67455bf050a80711e1e25a7cb7bc6fe4c6ce726f618b0a6db9c606fc90e67 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d88a29ec64fd25e83207bee6c4c27320N.exe
Size

34KB
Sample

240818-j8tw1sxekk
MD5

d88a29ec64fd25e83207bee6c4c27320
SHA1

1648eb385bf23dc46904e58751584765e7c5d1a7
SHA256

17e67455bf050a80711e1e25a7cb7bc6fe4c6ce726f618b0a6db9c606fc90e67
SHA512

0502a0bfac2876b8ad616c64e257550c0430e01b2ecc22fdcb683dbd681c75c1b2be5962d51700f0a253fbbf6df8f835ed466c2862b204fb91dd51205644b5ee
SSDEEP

768:W7BlphA7pARFbhM0Kkq81LOyq81LOl6Sl5ltKV0lAU:W7ZhA7pApM21LOA1LOl6AKW1

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  d88a29ec64fd25e83207bee6c4c27320N.exe
- Size
  
  34KB
- MD5
  
  d88a29ec64fd25e83207bee6c4c27320
- SHA1
  
  1648eb385bf23dc46904e58751584765e7c5d1a7
- SHA256
  
  17e67455bf050a80711e1e25a7cb7bc6fe4c6ce726f618b0a6db9c606fc90e67
- SHA512
  
  0502a0bfac2876b8ad616c64e257550c0430e01b2ecc22fdcb683dbd681c75c1b2be5962d51700f0a253fbbf6df8f835ed466c2862b204fb91dd51205644b5ee
- SSDEEP
  
  768:W7BlphA7pARFbhM0Kkq81LOyq81LOl6Sl5ltKV0lAU:W7ZhA7pApM21LOA1LOl6AKW1
Score

9^/10

discovery ransomware
- Renames multiple (480) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware