821166701b16c3bf033d4d8bd073a41e3d37988564d6988c44df2c8117ba8fb1 | Triage

Sharing

General

Target

b2ae9c0fcc6f3483f54c6683d2cc7250N.exe
Size

45KB
Sample

240819-zwzvhazcnn
MD5

b2ae9c0fcc6f3483f54c6683d2cc7250
SHA1

76c36d12f23adeb5e2231cc62d6cdcff5ece2039
SHA256

821166701b16c3bf033d4d8bd073a41e3d37988564d6988c44df2c8117ba8fb1
SHA512

5c34687abbb9fad431ea3f376014faae1e234f74a60e0b7426cb226e29c1ed25223296d6a3db686912d12928c33411b2f215ea6efe96c42acd2b17a7b11ce046
SSDEEP

384:yBs7Br5xjL8AgA71FbhvBfepj3cfepj3KtLJilqGelqG4K66CPK66C6:/7BlpQpARFbhq1KtGFGxNCSNC6

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  b2ae9c0fcc6f3483f54c6683d2cc7250N.exe
- Size
  
  45KB
- MD5
  
  b2ae9c0fcc6f3483f54c6683d2cc7250
- SHA1
  
  76c36d12f23adeb5e2231cc62d6cdcff5ece2039
- SHA256
  
  821166701b16c3bf033d4d8bd073a41e3d37988564d6988c44df2c8117ba8fb1
- SHA512
  
  5c34687abbb9fad431ea3f376014faae1e234f74a60e0b7426cb226e29c1ed25223296d6a3db686912d12928c33411b2f215ea6efe96c42acd2b17a7b11ce046
- SSDEEP
  
  384:yBs7Br5xjL8AgA71FbhvBfepj3cfepj3KtLJilqGelqG4K66CPK66C6:/7BlpQpARFbhq1KtGFGxNCSNC6
Score

9^/10

discovery ransomware
- Renames multiple (3369) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware