ed6a57ebdec1e1c5414bf39fc7009b0826bea2e893ac1c4ba982d64c106ef1d3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74c285df0cbe66aa82796f4da18a5190N.exe
Size

35KB
Sample

240819-2eqxdashrp
MD5

74c285df0cbe66aa82796f4da18a5190
SHA1

a1c12c1217ded8d2554bbfac2e21db1448accf97
SHA256

ed6a57ebdec1e1c5414bf39fc7009b0826bea2e893ac1c4ba982d64c106ef1d3
SHA512

aad4b0d803c4da71e6524010e73bde6f6f0b3d8ca8ee09e166eca4f8a24e0d9cc50e5e7e98013e9aad1735f7a4747db9dfb9be9c268d1785c40dcffa9bf55b9e
SSDEEP

768:W7BlphA7pARFbhM0Kkq81LOyq81LOl6Sl5ltt:W7ZhA7pApM21LOA1LOl6At

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  74c285df0cbe66aa82796f4da18a5190N.exe
- Size
  
  35KB
- MD5
  
  74c285df0cbe66aa82796f4da18a5190
- SHA1
  
  a1c12c1217ded8d2554bbfac2e21db1448accf97
- SHA256
  
  ed6a57ebdec1e1c5414bf39fc7009b0826bea2e893ac1c4ba982d64c106ef1d3
- SHA512
  
  aad4b0d803c4da71e6524010e73bde6f6f0b3d8ca8ee09e166eca4f8a24e0d9cc50e5e7e98013e9aad1735f7a4747db9dfb9be9c268d1785c40dcffa9bf55b9e
- SSDEEP
  
  768:W7BlphA7pARFbhM0Kkq81LOyq81LOl6Sl5ltt:W7ZhA7pApM21LOA1LOl6At
Score

9^/10

discovery ransomware
- Renames multiple (3269) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware