e113e8114e117c619f542439d17624896cbeea294e3851cc588eb23575d7ee96 | Triage

Sharing

General

Target

d0f49308cf95b41eb73159f5a6372fa0N.exe
Size

48KB
Sample

240819-njz4ys1erb
MD5

d0f49308cf95b41eb73159f5a6372fa0
SHA1

cdbac8a02699e24ca91fe107415b3605321d57aa
SHA256

e113e8114e117c619f542439d17624896cbeea294e3851cc588eb23575d7ee96
SHA512

b7202e4714fec1d4f34900d9da542059b52ea389f33df22229f3069428e062febcd95a3dc0831c76d5046a27f600765e49a31763569ac39e780bf753e44527f2
SSDEEP

1536:W7ZhA7pApM21LOA1LO2c6b25gc6b25uCrbpSvr51:6e7WpMgLOiLO2c6b25gc6b25A

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  d0f49308cf95b41eb73159f5a6372fa0N.exe
- Size
  
  48KB
- MD5
  
  d0f49308cf95b41eb73159f5a6372fa0
- SHA1
  
  cdbac8a02699e24ca91fe107415b3605321d57aa
- SHA256
  
  e113e8114e117c619f542439d17624896cbeea294e3851cc588eb23575d7ee96
- SHA512
  
  b7202e4714fec1d4f34900d9da542059b52ea389f33df22229f3069428e062febcd95a3dc0831c76d5046a27f600765e49a31763569ac39e780bf753e44527f2
- SSDEEP
  
  1536:W7ZhA7pApM21LOA1LO2c6b25gc6b25uCrbpSvr51:6e7WpMgLOiLO2c6b25gc6b25A
Score

9^/10

discovery ransomware
- Renames multiple (1037) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware