451919166382da39c350bbad714e016d2aca896160766fb3270f49c623aa81d5 | Triage

Sharing

General

Target

c36a7a2d2cf097095722dd6651788130N.exe
Size

45KB
Sample

240819-d1dbea1hpf
MD5

c36a7a2d2cf097095722dd6651788130
SHA1

7c51f7cfda0efbf949e90c1d37abec7267f75817
SHA256

451919166382da39c350bbad714e016d2aca896160766fb3270f49c623aa81d5
SHA512

a545bc7d1573fcfccf8b64ef3a39f7b6245f8356d4b0eb6526d67c8ac61fcd078ab86b024930572e8235202855ce58f1e0118566c1d1a149d26437bfce1ecf7a
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFjqAJLOqAJLuY2Z0Z3:W7ZppApBULcfpHLcfpyDXYF

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  c36a7a2d2cf097095722dd6651788130N.exe
- Size
  
  45KB
- MD5
  
  c36a7a2d2cf097095722dd6651788130
- SHA1
  
  7c51f7cfda0efbf949e90c1d37abec7267f75817
- SHA256
  
  451919166382da39c350bbad714e016d2aca896160766fb3270f49c623aa81d5
- SHA512
  
  a545bc7d1573fcfccf8b64ef3a39f7b6245f8356d4b0eb6526d67c8ac61fcd078ab86b024930572e8235202855ce58f1e0118566c1d1a149d26437bfce1ecf7a
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFjqAJLOqAJLuY2Z0Z3:W7ZppApBULcfpHLcfpyDXYF
Score

9^/10

discovery ransomware
- Renames multiple (3236) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware