16a2ee21786cc19b18476f0e3405836c5c81e548e4779b6008b4edd40bd83a3c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd2576f30d15e403a8e0bbe48e63b790N.exe
Size

70KB
Sample

240820-t5hdxsseje
MD5

bd2576f30d15e403a8e0bbe48e63b790
SHA1

2b89fb7b56f3057d2b308432a90c4c7d7bc68180
SHA256

16a2ee21786cc19b18476f0e3405836c5c81e548e4779b6008b4edd40bd83a3c
SHA512

2918c2393efb31bbb7d7e557dfedd581ca8fa25052be0d94607765d7eb9a891451476c767fee78bfb31b95efb0dbc65e15ea93451b2a2218cdf3789a68af2abd
SSDEEP

1536:W7ZDpApYbVK4vx4PN54PN4OHepOHeZSv33:6DWp7W3

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  bd2576f30d15e403a8e0bbe48e63b790N.exe
- Size
  
  70KB
- MD5
  
  bd2576f30d15e403a8e0bbe48e63b790
- SHA1
  
  2b89fb7b56f3057d2b308432a90c4c7d7bc68180
- SHA256
  
  16a2ee21786cc19b18476f0e3405836c5c81e548e4779b6008b4edd40bd83a3c
- SHA512
  
  2918c2393efb31bbb7d7e557dfedd581ca8fa25052be0d94607765d7eb9a891451476c767fee78bfb31b95efb0dbc65e15ea93451b2a2218cdf3789a68af2abd
- SSDEEP
  
  1536:W7ZDpApYbVK4vx4PN54PN4OHepOHeZSv33:6DWp7W3
Score

9^/10

discovery ransomware
- Renames multiple (363) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware