dfd36781127be75ebc48fa9251fb9278004a792e3fab2747a1be01dc9a1f3c1d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

254d749a1c654f204830fce14f7cfe20N.exe
Size

98KB
Sample

240820-vbp3casgqc
MD5

254d749a1c654f204830fce14f7cfe20
SHA1

71a05776100aa35e44650e110865a37dc4f051af
SHA256

dfd36781127be75ebc48fa9251fb9278004a792e3fab2747a1be01dc9a1f3c1d
SHA512

67a51bddd987bc91e05bcb16c619782610cf91fe085e6abb57b32f61023b3db0e8ca95f7196b99129055678448b492a9993e16c5eb4b1e242fff77ec98b7cf81
SSDEEP

1536:/7ZQpApg9u9rYmdC4cq5AMaBikyJ+s6LiU3H:9QWpyu+JDIkyJXU3H

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  254d749a1c654f204830fce14f7cfe20N.exe
- Size
  
  98KB
- MD5
  
  254d749a1c654f204830fce14f7cfe20
- SHA1
  
  71a05776100aa35e44650e110865a37dc4f051af
- SHA256
  
  dfd36781127be75ebc48fa9251fb9278004a792e3fab2747a1be01dc9a1f3c1d
- SHA512
  
  67a51bddd987bc91e05bcb16c619782610cf91fe085e6abb57b32f61023b3db0e8ca95f7196b99129055678448b492a9993e16c5eb4b1e242fff77ec98b7cf81
- SSDEEP
  
  1536:/7ZQpApg9u9rYmdC4cq5AMaBikyJ+s6LiU3H:9QWpyu+JDIkyJXU3H
Score

9^/10

discovery ransomware
- Renames multiple (2966) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware