f7ef7fc9bbb3e14f407d60f679defea525f28f57ff852df9aedb2d6db720c83e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05299f966cb3aaf7c0c474a86ac9b870N.exe
Size

72KB
Sample

240821-s4a3sazfqm
MD5

05299f966cb3aaf7c0c474a86ac9b870
SHA1

5ea35ffdd70a1d53af7ed42aacd5bfbc4910f05a
SHA256

f7ef7fc9bbb3e14f407d60f679defea525f28f57ff852df9aedb2d6db720c83e
SHA512

fad500b8ca24847ef51883be30ca0a3bb197b84154525c9c314a2ec3c20c8da6abbb7c29b51d8720f38ee5ddc879d73451ad720b916c1bef114b0474026e1e9b
SSDEEP

1536:W7Z2sspApkZrZ4+fU7lK1lKT8/8aPtPf8mdG3mdGT:62ssWpcU7lK1lKgkE+

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  05299f966cb3aaf7c0c474a86ac9b870N.exe
- Size
  
  72KB
- MD5
  
  05299f966cb3aaf7c0c474a86ac9b870
- SHA1
  
  5ea35ffdd70a1d53af7ed42aacd5bfbc4910f05a
- SHA256
  
  f7ef7fc9bbb3e14f407d60f679defea525f28f57ff852df9aedb2d6db720c83e
- SHA512
  
  fad500b8ca24847ef51883be30ca0a3bb197b84154525c9c314a2ec3c20c8da6abbb7c29b51d8720f38ee5ddc879d73451ad720b916c1bef114b0474026e1e9b
- SSDEEP
  
  1536:W7Z2sspApkZrZ4+fU7lK1lKT8/8aPtPf8mdG3mdGT:62ssWpcU7lK1lKgkE+
Score

9^/10

discovery ransomware
- Renames multiple (3024) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware