9314c660f74024b1275a3c33a38f64de7db51b44a89cb8498f22ef11b3ed2e35 | Triage

Sharing

General

Target

9e912fd4b25dd82894fc6e1b85582730N.exe
Size

43KB
Sample

240821-ht7c5avfpa
MD5

9e912fd4b25dd82894fc6e1b85582730
SHA1

bc8c21c7eae03657bcf8d42a4206eaa13e2a6c84
SHA256

9314c660f74024b1275a3c33a38f64de7db51b44a89cb8498f22ef11b3ed2e35
SHA512

0175c3d837c667ef5728bbc69cb1e56dab4ac8dc20396f86815fcb2d83a2bc7244e74931b75e8e2005d3b2b0e6339f52edc6a83bd1f55eec4693db64b12a7137
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFjqAJLOqAJLHSKSd:W7ZppApBULcfpHLcfpyDcRW

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  9e912fd4b25dd82894fc6e1b85582730N.exe
- Size
  
  43KB
- MD5
  
  9e912fd4b25dd82894fc6e1b85582730
- SHA1
  
  bc8c21c7eae03657bcf8d42a4206eaa13e2a6c84
- SHA256
  
  9314c660f74024b1275a3c33a38f64de7db51b44a89cb8498f22ef11b3ed2e35
- SHA512
  
  0175c3d837c667ef5728bbc69cb1e56dab4ac8dc20396f86815fcb2d83a2bc7244e74931b75e8e2005d3b2b0e6339f52edc6a83bd1f55eec4693db64b12a7137
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFjqAJLOqAJLHSKSd:W7ZppApBULcfpHLcfpyDcRW
Score

9^/10

discovery ransomware
- Renames multiple (3263) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware