83e18dcb257759aa9ddfb13d9674f791a11d8b5a8bd53a6ea0cbe3c13cd0e926 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf7cd270f9ea55d57471c5d4f3969970N.exe
Size

81KB
Sample

240821-gt11nsxalm
MD5

bf7cd270f9ea55d57471c5d4f3969970
SHA1

bd8c1b52a245365dc1b0fde92197381fc9b59e37
SHA256

83e18dcb257759aa9ddfb13d9674f791a11d8b5a8bd53a6ea0cbe3c13cd0e926
SHA512

924d6e4daff8e5bf1f7e9eaca1a95337d5fe5993d3aa9c78062aa96ecb37c73a00ee4fdfb4938beb4cc5a47bbd9a22e9e89581c1d2af5652c913bc0de91ea75f
SSDEEP

1536:W7ZNLpApCZrt8PWGoPWGANdN+hEwHwDvZvapBpYY5uh1P1G:6NLWpCZIzjwHwxNG

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  bf7cd270f9ea55d57471c5d4f3969970N.exe
- Size
  
  81KB
- MD5
  
  bf7cd270f9ea55d57471c5d4f3969970
- SHA1
  
  bd8c1b52a245365dc1b0fde92197381fc9b59e37
- SHA256
  
  83e18dcb257759aa9ddfb13d9674f791a11d8b5a8bd53a6ea0cbe3c13cd0e926
- SHA512
  
  924d6e4daff8e5bf1f7e9eaca1a95337d5fe5993d3aa9c78062aa96ecb37c73a00ee4fdfb4938beb4cc5a47bbd9a22e9e89581c1d2af5652c913bc0de91ea75f
- SSDEEP
  
  1536:W7ZNLpApCZrt8PWGoPWGANdN+hEwHwDvZvapBpYY5uh1P1G:6NLWpCZIzjwHwxNG
Score

9^/10

discovery ransomware
- Renames multiple (3251) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware