2f207ce6e1330478dca477c35e5ad64af991c94ace11d072c5e7649861f6bfd8 | Triage

Sharing

General

Target

2e4ed1d39135f43e1d88958ce674e320N.exe
Size

40KB
Sample

240821-bxn8dstdje
MD5

2e4ed1d39135f43e1d88958ce674e320
SHA1

7c560d057a47a5a1e02456f36f6a3a12b4097c57
SHA256

2f207ce6e1330478dca477c35e5ad64af991c94ace11d072c5e7649861f6bfd8
SHA512

4019c6a57ae0cc5a6b6b054785120868f7b5d089c1f455329ced5542aeddcfde7bb70da06d41ba74c1a0896fcea551bef2fddf610013b905bb37b064123b5397
SSDEEP

384:yBs7Br5xjL8AgA71Fbhv/FzS5c52d/sPl:/7BlpQpARFbhdS5c52d+

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  2e4ed1d39135f43e1d88958ce674e320N.exe
- Size
  
  40KB
- MD5
  
  2e4ed1d39135f43e1d88958ce674e320
- SHA1
  
  7c560d057a47a5a1e02456f36f6a3a12b4097c57
- SHA256
  
  2f207ce6e1330478dca477c35e5ad64af991c94ace11d072c5e7649861f6bfd8
- SHA512
  
  4019c6a57ae0cc5a6b6b054785120868f7b5d089c1f455329ced5542aeddcfde7bb70da06d41ba74c1a0896fcea551bef2fddf610013b905bb37b064123b5397
- SSDEEP
  
  384:yBs7Br5xjL8AgA71Fbhv/FzS5c52d/sPl:/7BlpQpARFbhdS5c52d+
Score

9^/10

discovery ransomware
- Renames multiple (3352) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware