ff3d3276ca1e1165ea4575dffd4cbf8c29fd6f924988d934a8402ab6f0020edb | Triage

Sharing

General

Target

85b6610b9c0ac1fb8b6b520fe436db60N.exe
Size

46KB
Sample

240819-lemxqawdng
MD5

85b6610b9c0ac1fb8b6b520fe436db60
SHA1

2731a5a6d8cbcb18a6415a938839119382701d32
SHA256

ff3d3276ca1e1165ea4575dffd4cbf8c29fd6f924988d934a8402ab6f0020edb
SHA512

ff5f81f6024477809e6858db5f8c8fa65a62addb4dbc59a8180a3e53e4b77ebdaa733c51c71d8ee227679ebce2386a95a003da20d29023de082ec67b8c4c6a83
SSDEEP

768:W7BlpppARFbhHFoqAJwBqAJw1VyjVyfxAkJhxAkJ5rf:W7ZppApyVyjVyXrf

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  85b6610b9c0ac1fb8b6b520fe436db60N.exe
- Size
  
  46KB
- MD5
  
  85b6610b9c0ac1fb8b6b520fe436db60
- SHA1
  
  2731a5a6d8cbcb18a6415a938839119382701d32
- SHA256
  
  ff3d3276ca1e1165ea4575dffd4cbf8c29fd6f924988d934a8402ab6f0020edb
- SHA512
  
  ff5f81f6024477809e6858db5f8c8fa65a62addb4dbc59a8180a3e53e4b77ebdaa733c51c71d8ee227679ebce2386a95a003da20d29023de082ec67b8c4c6a83
- SSDEEP
  
  768:W7BlpppARFbhHFoqAJwBqAJw1VyjVyfxAkJhxAkJ5rf:W7ZppApyVyjVyXrf
Score

9^/10

discovery ransomware
- Renames multiple (3319) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware