3ed5c067b89acc26e140f09db9ae2eb4d6062c5a01f04b77c8ca57a5235e4062 | Triage

Sharing

General

Target

96fe929ee89a51b3a659751b37bee6d0N.exe
Size

71KB
Sample

240820-ytcrhs1brh
MD5

96fe929ee89a51b3a659751b37bee6d0
SHA1

db6b6f3b23df6066b71292c81b191d4a540adad2
SHA256

3ed5c067b89acc26e140f09db9ae2eb4d6062c5a01f04b77c8ca57a5235e4062
SHA512

fb5af9c22dc817d09dde91edbdb6458d7b72f2c7772a6fa22d8cf380fc46e6fd5179e2ade8d282b0441da318025f79a57bf1e95a79ce480cb1d551e43632032d
SSDEEP

1536:/7ZQpApze+eJfFpsJOfFpsJ5DVSWu0SWuA35:9QWpze+eJfFpsJOfFpsJ5DVSWu0SWu6

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  96fe929ee89a51b3a659751b37bee6d0N.exe
- Size
  
  71KB
- MD5
  
  96fe929ee89a51b3a659751b37bee6d0
- SHA1
  
  db6b6f3b23df6066b71292c81b191d4a540adad2
- SHA256
  
  3ed5c067b89acc26e140f09db9ae2eb4d6062c5a01f04b77c8ca57a5235e4062
- SHA512
  
  fb5af9c22dc817d09dde91edbdb6458d7b72f2c7772a6fa22d8cf380fc46e6fd5179e2ade8d282b0441da318025f79a57bf1e95a79ce480cb1d551e43632032d
- SSDEEP
  
  1536:/7ZQpApze+eJfFpsJOfFpsJ5DVSWu0SWuA35:9QWpze+eJfFpsJOfFpsJ5DVSWu0SWu6
Score

9^/10

discovery ransomware
- Renames multiple (3138) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware