db8046913a7a8a63fcb2766d5a0721c4541a9ed38a5607661a947bc6ef2df4c4 | Triage

Sharing

General

Target

b32e3bb50939d30c6da3a3cf42370490N.exe
Size

69KB
Sample

240820-bvldqawhra
MD5

b32e3bb50939d30c6da3a3cf42370490
SHA1

083b57ce7c1b60b928e9c7a8accc47d0c7d86506
SHA256

db8046913a7a8a63fcb2766d5a0721c4541a9ed38a5607661a947bc6ef2df4c4
SHA512

93f423187baa43255546866c22236a51dfc9124e33c31e40f08f6d62f6304eb86d0d6dbd4c457712622bea80546fadffd0166ebc1f87b14f123b81ae7dd69565
SSDEEP

1536:W7ZNLpApCZrt8PWGoPWGANdN+hEwHwDvZvu:6NLWpCZIzjwHwA

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  b32e3bb50939d30c6da3a3cf42370490N.exe
- Size
  
  69KB
- MD5
  
  b32e3bb50939d30c6da3a3cf42370490
- SHA1
  
  083b57ce7c1b60b928e9c7a8accc47d0c7d86506
- SHA256
  
  db8046913a7a8a63fcb2766d5a0721c4541a9ed38a5607661a947bc6ef2df4c4
- SHA512
  
  93f423187baa43255546866c22236a51dfc9124e33c31e40f08f6d62f6304eb86d0d6dbd4c457712622bea80546fadffd0166ebc1f87b14f123b81ae7dd69565
- SSDEEP
  
  1536:W7ZNLpApCZrt8PWGoPWGANdN+hEwHwDvZvu:6NLWpCZIzjwHwA
Score

9^/10

discovery ransomware
- Renames multiple (3136) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware