2078503cd02f6794a16738701069f5e02929b742dfa360472f507c7fdedfb250 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0597096aef42929f1d23520381a32140N.exe
Size

42KB
Sample

240819-rbttraxhrc
MD5

0597096aef42929f1d23520381a32140
SHA1

98b433e91c687f6428a2e53da9d049ba01fdd9bd
SHA256

2078503cd02f6794a16738701069f5e02929b742dfa360472f507c7fdedfb250
SHA512

01f17bc7c2af9f6e9c1da8e022668b7ee6e71f075705e9d1a5dfc7012bc51a9e9aa852fd367b485f37b28635eb66fda36fc61825b8b0706780d5b62ac3a9827f
SSDEEP

384:yBs7Br5xjL8AgA71FbhvBfepj3cfepj3KtLJilqGelqGa:/7BlpQpARFbhq1KtGFGa

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  0597096aef42929f1d23520381a32140N.exe
- Size
  
  42KB
- MD5
  
  0597096aef42929f1d23520381a32140
- SHA1
  
  98b433e91c687f6428a2e53da9d049ba01fdd9bd
- SHA256
  
  2078503cd02f6794a16738701069f5e02929b742dfa360472f507c7fdedfb250
- SHA512
  
  01f17bc7c2af9f6e9c1da8e022668b7ee6e71f075705e9d1a5dfc7012bc51a9e9aa852fd367b485f37b28635eb66fda36fc61825b8b0706780d5b62ac3a9827f
- SSDEEP
  
  384:yBs7Br5xjL8AgA71FbhvBfepj3cfepj3KtLJilqGelqGa:/7BlpQpARFbhq1KtGFGa
Score

9^/10

discovery ransomware
- Renames multiple (526) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware