d1bdb0b7ac397f10e81f5354a7684ec44d4eee7544770eccfaa54a9284183089 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bac4f8194637c79a1c0c12b3a4f81500N.exe
Size

52KB
Sample

240821-kyy9estdrl
MD5

bac4f8194637c79a1c0c12b3a4f81500
SHA1

9b686a7f7a45c07e2c8d47407a5f415350680e8b
SHA256

d1bdb0b7ac397f10e81f5354a7684ec44d4eee7544770eccfaa54a9284183089
SHA512

4b189ed2211ebdbb2ada56d9e1ca4185d9ec1f1adac560ca93973e6fe5149bf5e5cf845d1182bb330394440a1097d255d54ddb789a1d5ba5668da73356088f64
SSDEEP

768:W7BlpppARFbhHFoqAJwBqAJw1VyjVyfxAkJhxAkJ/1P2vcAivcAFNwgZ8NwgZo:W7ZppApyVyjVy21u1FNwHNwH

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  bac4f8194637c79a1c0c12b3a4f81500N.exe
- Size
  
  52KB
- MD5
  
  bac4f8194637c79a1c0c12b3a4f81500
- SHA1
  
  9b686a7f7a45c07e2c8d47407a5f415350680e8b
- SHA256
  
  d1bdb0b7ac397f10e81f5354a7684ec44d4eee7544770eccfaa54a9284183089
- SHA512
  
  4b189ed2211ebdbb2ada56d9e1ca4185d9ec1f1adac560ca93973e6fe5149bf5e5cf845d1182bb330394440a1097d255d54ddb789a1d5ba5668da73356088f64
- SSDEEP
  
  768:W7BlpppARFbhHFoqAJwBqAJw1VyjVyfxAkJhxAkJ/1P2vcAivcAFNwgZ8NwgZo:W7ZppApyVyjVy21u1FNwHNwH
Score

9^/10

discovery ransomware
- Renames multiple (3395) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware