51e1323111ad6c92f6aff17f39b376c0ef9df5888c99f39f8eea26bf601e91a0 | Triage

Sharing

General

Target

ae2c71a44e5d67d35ca1045b5bc2b9e0N.exe
Size

36KB
Sample

240821-v9nxyasakh
MD5

ae2c71a44e5d67d35ca1045b5bc2b9e0
SHA1

f017b0ab1ebe772c981c05f80a18aa9c739f9b6e
SHA256

51e1323111ad6c92f6aff17f39b376c0ef9df5888c99f39f8eea26bf601e91a0
SHA512

609de5cfd334225f56d656331b56feb133a1b6b9e576f137dbea0d9d7ab15862a42c80ec80f19f4165109145fa21a84d0dcd88fcaf7f94c617c70c519911a2c8
SSDEEP

192:pACU3DIY0Br5xjL/EAgAQmP1oynLb22vB7m/FJHo7m/FJHA9jxje6OMmy6OMmI0:yBs7Br5xjL8AgA71Fbhv/Fzzwz+

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  ae2c71a44e5d67d35ca1045b5bc2b9e0N.exe
- Size
  
  36KB
- MD5
  
  ae2c71a44e5d67d35ca1045b5bc2b9e0
- SHA1
  
  f017b0ab1ebe772c981c05f80a18aa9c739f9b6e
- SHA256
  
  51e1323111ad6c92f6aff17f39b376c0ef9df5888c99f39f8eea26bf601e91a0
- SHA512
  
  609de5cfd334225f56d656331b56feb133a1b6b9e576f137dbea0d9d7ab15862a42c80ec80f19f4165109145fa21a84d0dcd88fcaf7f94c617c70c519911a2c8
- SSDEEP
  
  192:pACU3DIY0Br5xjL/EAgAQmP1oynLb22vB7m/FJHo7m/FJHA9jxje6OMmy6OMmI0:yBs7Br5xjL8AgA71Fbhv/Fzzwz+
Score

9^/10

discovery ransomware
- Renames multiple (337) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware