6021329bc6a92d68dceafc1e015751b71b6ccda6af0f7b27025504a61d034a5c | Triage

Sharing

General

Target

a2f4c2187a4526ba2fd1d409d0785550N.exe
Size

45KB
Sample

240821-thh2ya1enm
MD5

a2f4c2187a4526ba2fd1d409d0785550
SHA1

ba37501f19097a9524716dff63db3b613b30b940
SHA256

6021329bc6a92d68dceafc1e015751b71b6ccda6af0f7b27025504a61d034a5c
SHA512

31dc5e4ece23199f4a2c02d9296d7e95443388fd77edeeb700e9cb1221809cdf9a351c5c8ecaea5513aa06d49d098218fcf9e1a4b02325be32d221f5a153e18b
SSDEEP

768:W7BlphA7pARFbhM0Kkq81LOyq81LOl6Sl5lsSgxoVz8zJUDrYYaCusjLBEKxVTLg:W7ZhA7pApM21LOA1LOl6vSgxoVz8FUDc

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  a2f4c2187a4526ba2fd1d409d0785550N.exe
- Size
  
  45KB
- MD5
  
  a2f4c2187a4526ba2fd1d409d0785550
- SHA1
  
  ba37501f19097a9524716dff63db3b613b30b940
- SHA256
  
  6021329bc6a92d68dceafc1e015751b71b6ccda6af0f7b27025504a61d034a5c
- SHA512
  
  31dc5e4ece23199f4a2c02d9296d7e95443388fd77edeeb700e9cb1221809cdf9a351c5c8ecaea5513aa06d49d098218fcf9e1a4b02325be32d221f5a153e18b
- SSDEEP
  
  768:W7BlphA7pARFbhM0Kkq81LOyq81LOl6Sl5lsSgxoVz8zJUDrYYaCusjLBEKxVTLg:W7ZhA7pApM21LOA1LOl6vSgxoVz8FUDc
Score

9^/10

discovery ransomware
- Renames multiple (3239) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware