4210daeb7521f17e8b344f3b4722539dd62732a666a05d540b7ff60a1074dc73 | Triage

Sharing

General

Target

18f4e2479a2ab0ae51dce9a12d1d0f60N.exe
Size

45KB
Sample

240820-3laz6ssgrk
MD5

18f4e2479a2ab0ae51dce9a12d1d0f60
SHA1

dadfb60f12f752a31956d52a308de98073323d66
SHA256

4210daeb7521f17e8b344f3b4722539dd62732a666a05d540b7ff60a1074dc73
SHA512

bc29c263705332d43717762399e244a09acbe683c25fcb63e618071436c2b73fa30e441657543746ac52540fcfd84249d34d57676f6e07cc251d9e5ec6dd2b87
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42Lcfpb2N231F1LfFfV:W7ZppApBULcfpHLcfpSo3fN1V

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  18f4e2479a2ab0ae51dce9a12d1d0f60N.exe
- Size
  
  45KB
- MD5
  
  18f4e2479a2ab0ae51dce9a12d1d0f60
- SHA1
  
  dadfb60f12f752a31956d52a308de98073323d66
- SHA256
  
  4210daeb7521f17e8b344f3b4722539dd62732a666a05d540b7ff60a1074dc73
- SHA512
  
  bc29c263705332d43717762399e244a09acbe683c25fcb63e618071436c2b73fa30e441657543746ac52540fcfd84249d34d57676f6e07cc251d9e5ec6dd2b87
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42Lcfpb2N231F1LfFfV:W7ZppApBULcfpHLcfpSo3fN1V
Score

9^/10

discovery ransomware
- Renames multiple (3235) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware