a4dc31c98161e78613e33a3e4020a4e293594b42dde1e3377b0c17bfeb449497 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35f87b767520d1c09cf6250ec71cea10N.exe
Size

37KB
Sample

240819-tvw5bsthjh
MD5

35f87b767520d1c09cf6250ec71cea10
SHA1

110a1408ec936fa7ce0a2dcb8ff50e8962b8c316
SHA256

a4dc31c98161e78613e33a3e4020a4e293594b42dde1e3377b0c17bfeb449497
SHA512

dffa92f544ceb88033520ef2a26780d1a3560019a59f827420315fec70147b864bd8476628e619617ab1aa148b683d281cc8fb8332103e002a0b3b222aea8598
SSDEEP

768:W7BlphA7pARFbhM0Kkq81LOyq81LOl6Sl5lt/fZfV:W7ZhA7pApM21LOA1LOl6AD

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  35f87b767520d1c09cf6250ec71cea10N.exe
- Size
  
  37KB
- MD5
  
  35f87b767520d1c09cf6250ec71cea10
- SHA1
  
  110a1408ec936fa7ce0a2dcb8ff50e8962b8c316
- SHA256
  
  a4dc31c98161e78613e33a3e4020a4e293594b42dde1e3377b0c17bfeb449497
- SHA512
  
  dffa92f544ceb88033520ef2a26780d1a3560019a59f827420315fec70147b864bd8476628e619617ab1aa148b683d281cc8fb8332103e002a0b3b222aea8598
- SSDEEP
  
  768:W7BlphA7pARFbhM0Kkq81LOyq81LOl6Sl5lt/fZfV:W7ZhA7pApM21LOA1LOl6AD
Score

9^/10

discovery ransomware
- Renames multiple (499) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware