5f36d3891e8ea2141bc4ce645e8db294c2165a884866c3fbe79ff548c8b33da9 | Triage

Sharing

General

Target

f49bb76d0b7277e061d85f269e7d56d0N.exe
Size

98KB
Sample

240820-zl4eyawfpm
MD5

f49bb76d0b7277e061d85f269e7d56d0
SHA1

4dfac219d46adef22de9afcb80f698ed1da04f81
SHA256

5f36d3891e8ea2141bc4ce645e8db294c2165a884866c3fbe79ff548c8b33da9
SHA512

32a6c47888126af453471da2afa8054b7fed4940efef5055acf4adff938d0807e7ca822c61001c93eb08b81685b2e7182570b77c6e836a08a5ab0641b3da4a63
SSDEEP

1536:W7ZDpApYbWjIlE77ufL2e+efZwZQ/8S/8z3MLu:6DWpwE7oL2e+efZwZ08i8z3MLu

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  f49bb76d0b7277e061d85f269e7d56d0N.exe
- Size
  
  98KB
- MD5
  
  f49bb76d0b7277e061d85f269e7d56d0
- SHA1
  
  4dfac219d46adef22de9afcb80f698ed1da04f81
- SHA256
  
  5f36d3891e8ea2141bc4ce645e8db294c2165a884866c3fbe79ff548c8b33da9
- SHA512
  
  32a6c47888126af453471da2afa8054b7fed4940efef5055acf4adff938d0807e7ca822c61001c93eb08b81685b2e7182570b77c6e836a08a5ab0641b3da4a63
- SSDEEP
  
  1536:W7ZDpApYbWjIlE77ufL2e+efZwZQ/8S/8z3MLu:6DWpwE7oL2e+efZwZ08i8z3MLu
Score

9^/10

discovery ransomware
- Renames multiple (2904) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware