238ffb8f962becac8760463917965fe0dc45b11b853408a93f24391f721aa4f2 | Triage

Sharing

General

Target

be35190da2d81076b6f6562660dbcbc0N.exe
Size

126KB
Sample

240819-ymebrssgme
MD5

be35190da2d81076b6f6562660dbcbc0
SHA1

a616f76a6612ea3e2553a1718ec1a953e6d057ae
SHA256

238ffb8f962becac8760463917965fe0dc45b11b853408a93f24391f721aa4f2
SHA512

87eb09f81fd17baebb0c7b13911acdd0774d3f226b6ddaf892619ce04b87a86736c861b9d1c03fb9bf5a0366b00e4c48aefb2b8f219b34a163c9b371ffb1de36
SSDEEP

1536:W7ZhA7dABJJZENTNyoKIKFTjruYTjruTTmXadjUSbcDemTPAZk+cLtdNlb9PfESh:6e76BtE5KIKFTjruYTjruT6W2QZwKS71

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  be35190da2d81076b6f6562660dbcbc0N.exe
- Size
  
  126KB
- MD5
  
  be35190da2d81076b6f6562660dbcbc0
- SHA1
  
  a616f76a6612ea3e2553a1718ec1a953e6d057ae
- SHA256
  
  238ffb8f962becac8760463917965fe0dc45b11b853408a93f24391f721aa4f2
- SHA512
  
  87eb09f81fd17baebb0c7b13911acdd0774d3f226b6ddaf892619ce04b87a86736c861b9d1c03fb9bf5a0366b00e4c48aefb2b8f219b34a163c9b371ffb1de36
- SSDEEP
  
  1536:W7ZhA7dABJJZENTNyoKIKFTjruYTjruTTmXadjUSbcDemTPAZk+cLtdNlb9PfESh:6e76BtE5KIKFTjruYTjruT6W2QZwKS71
Score

9^/10

discovery ransomware
- Renames multiple (2829) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware