c071ea3479b9d00dd59be4fafa7cc64cd1677a3b90001dcb1c09f549293e735d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41e7473516f448239fad538be292f800N.exe
Size

53KB
Sample

240818-rtz4gs1bkj
MD5

41e7473516f448239fad538be292f800
SHA1

0e8c226fed48db33199696b1dffe122e9dc51bee
SHA256

c071ea3479b9d00dd59be4fafa7cc64cd1677a3b90001dcb1c09f549293e735d
SHA512

f303a8f555f553253979c7d0c54c51261c95036f0a46d696d615ecbbf5899e7e22c8cccd7c49cba85e82261046772e95ca4642513aa4fa294796663cfd77dca3
SSDEEP

384:yBs7Br5xjL8AgA71FbhvBfepj3cfepj3KtLJr4S04SCzwzEuBd4WYIuBd4WYT2Uv:/7BlpQpARFbhq1KX101GIfBdMLBdMd

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  41e7473516f448239fad538be292f800N.exe
- Size
  
  53KB
- MD5
  
  41e7473516f448239fad538be292f800
- SHA1
  
  0e8c226fed48db33199696b1dffe122e9dc51bee
- SHA256
  
  c071ea3479b9d00dd59be4fafa7cc64cd1677a3b90001dcb1c09f549293e735d
- SHA512
  
  f303a8f555f553253979c7d0c54c51261c95036f0a46d696d615ecbbf5899e7e22c8cccd7c49cba85e82261046772e95ca4642513aa4fa294796663cfd77dca3
- SSDEEP
  
  384:yBs7Br5xjL8AgA71FbhvBfepj3cfepj3KtLJr4S04SCzwzEuBd4WYIuBd4WYT2Uv:/7BlpQpARFbhq1KX101GIfBdMLBdMd
Score

9^/10

discovery ransomware
- Renames multiple (3142) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware