45dbb4153d0fec11e38930ea826616ab1dd005dc4ad074c7e6c5b2428c6b0d7b | Triage

Sharing

General

Target

55f4052b71794b2ef7e86a6d2542c090N.exe
Size

35KB
Sample

240818-kbzaxaxfnk
MD5

55f4052b71794b2ef7e86a6d2542c090
SHA1

42501f81f7620f1f6851f78c918526daabceb69d
SHA256

45dbb4153d0fec11e38930ea826616ab1dd005dc4ad074c7e6c5b2428c6b0d7b
SHA512

8dcf4b359cf2103143ff375ed9e441882bf2198248c9e23bed0eeb8f210ba9f4ba761e4abd5b2550926c5549beaebc15855ae3c0faed5bdae1de5cb4dd5dabf1
SSDEEP

384:GBt7Br5xjL9AgA71Fbhv7bhv3KueKudLl++KKdXd/Qy:W7BlpppARFbhjbhPKueKudLw1KN3

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  55f4052b71794b2ef7e86a6d2542c090N.exe
- Size
  
  35KB
- MD5
  
  55f4052b71794b2ef7e86a6d2542c090
- SHA1
  
  42501f81f7620f1f6851f78c918526daabceb69d
- SHA256
  
  45dbb4153d0fec11e38930ea826616ab1dd005dc4ad074c7e6c5b2428c6b0d7b
- SHA512
  
  8dcf4b359cf2103143ff375ed9e441882bf2198248c9e23bed0eeb8f210ba9f4ba761e4abd5b2550926c5549beaebc15855ae3c0faed5bdae1de5cb4dd5dabf1
- SSDEEP
  
  384:GBt7Br5xjL9AgA71Fbhv7bhv3KueKudLl++KKdXd/Qy:W7BlpppARFbhjbhPKueKudLw1KN3
Score

9^/10

discovery ransomware
- Renames multiple (3434) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware