3e7ac9bcdfa03e34692d5dd390d2a2ffb9b032b21b1359622c21abc72a93683a | Triage

Sharing

General

Target

fbae888d18e683872a091e6006306450N.exe
Size

73KB
Sample

240819-bqtvaszblm
MD5

fbae888d18e683872a091e6006306450
SHA1

0f7d842238012a1b5590c6986c6526785a5ca7e7
SHA256

3e7ac9bcdfa03e34692d5dd390d2a2ffb9b032b21b1359622c21abc72a93683a
SHA512

143145352ad05ac2b1f900d0980f34b52b3f7919e554e00cb23f26b56aa62dfb0fe88a0ff723612b774caa3756400ff72c481d46b6eeda15a52b36fc4e39a6ac
SSDEEP

768:W7Blp2sspARFbhJpupZ5pZ4+fTgTvlK1lK6RZR+8/8gClurYClurUpOpLqfqY:W7Z2sspApkZrZ4+fU7lK1lKT8/82CY

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  fbae888d18e683872a091e6006306450N.exe
- Size
  
  73KB
- MD5
  
  fbae888d18e683872a091e6006306450
- SHA1
  
  0f7d842238012a1b5590c6986c6526785a5ca7e7
- SHA256
  
  3e7ac9bcdfa03e34692d5dd390d2a2ffb9b032b21b1359622c21abc72a93683a
- SHA512
  
  143145352ad05ac2b1f900d0980f34b52b3f7919e554e00cb23f26b56aa62dfb0fe88a0ff723612b774caa3756400ff72c481d46b6eeda15a52b36fc4e39a6ac
- SSDEEP
  
  768:W7Blp2sspARFbhJpupZ5pZ4+fTgTvlK1lK6RZR+8/8gClurYClurUpOpLqfqY:W7Z2sspApkZrZ4+fU7lK1lKT8/82CY
Score

9^/10

discovery ransomware
- Renames multiple (331) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware