ed1ddae3217a72c634c478f6ce38537c4c14bfe8c288a6f05244413c85bbf19f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0078aa08363284e575d713175813d470N.exe
Size

46KB
Sample

240819-qjxd6swcnc
MD5

0078aa08363284e575d713175813d470
SHA1

0c7e2da6fd707e9531806bf2a86fb903d6ea4055
SHA256

ed1ddae3217a72c634c478f6ce38537c4c14bfe8c288a6f05244413c85bbf19f
SHA512

43f9722d8bd3e0a3ee00fd6fb5067611f6e9024a2b4bc5cb4d255c123a0628a99cab33fc8501596fd83459afbe8fe73d6b03a8f68a6bca66301d8f8a9e972d59
SSDEEP

384:yBs7Br5xjL8AgA71Fbhv/Fzzwz72Jwuq2JwuR0U0Iu2U2cjdjH:/7BlpQpARFbhNIiJwsJwwnZY

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  0078aa08363284e575d713175813d470N.exe
- Size
  
  46KB
- MD5
  
  0078aa08363284e575d713175813d470
- SHA1
  
  0c7e2da6fd707e9531806bf2a86fb903d6ea4055
- SHA256
  
  ed1ddae3217a72c634c478f6ce38537c4c14bfe8c288a6f05244413c85bbf19f
- SHA512
  
  43f9722d8bd3e0a3ee00fd6fb5067611f6e9024a2b4bc5cb4d255c123a0628a99cab33fc8501596fd83459afbe8fe73d6b03a8f68a6bca66301d8f8a9e972d59
- SSDEEP
  
  384:yBs7Br5xjL8AgA71Fbhv/Fzzwz72Jwuq2JwuR0U0Iu2U2cjdjH:/7BlpQpARFbhNIiJwsJwwnZY
Score

9^/10

discovery ransomware
- Renames multiple (3754) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware