fe02a055e8802d5d4226347f0760fa00ce580f5d2637648baf460680a34c06c0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0433a222efa94c9a8fb708ace01ab90N.exe
Size

47KB
Sample

240821-3lctrswhma
MD5

a0433a222efa94c9a8fb708ace01ab90
SHA1

1134fe8a3ad2b22d6b3ae2a2bd6c27c7d7d50a1b
SHA256

fe02a055e8802d5d4226347f0760fa00ce580f5d2637648baf460680a34c06c0
SHA512

5569c17937e1bd3402d142a06c880e67e16d639e1e64b4b6e6d75ae9442a8779a1557c36b15009a401d875dced32d316ecb5661c4fff3dfadec14c13c49f7da3
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFXpK5c5khwRDThwRDA:W7ZppApBULcfpHLcfpyDA6swXwK

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  a0433a222efa94c9a8fb708ace01ab90N.exe
- Size
  
  47KB
- MD5
  
  a0433a222efa94c9a8fb708ace01ab90
- SHA1
  
  1134fe8a3ad2b22d6b3ae2a2bd6c27c7d7d50a1b
- SHA256
  
  fe02a055e8802d5d4226347f0760fa00ce580f5d2637648baf460680a34c06c0
- SHA512
  
  5569c17937e1bd3402d142a06c880e67e16d639e1e64b4b6e6d75ae9442a8779a1557c36b15009a401d875dced32d316ecb5661c4fff3dfadec14c13c49f7da3
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFXpK5c5khwRDThwRDA:W7ZppApBULcfpHLcfpyDA6swXwK
Score

9^/10

discovery ransomware
- Renames multiple (3254) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware