4a7b344334c011cee8fe991d5e7c40d2e53be0611f5d112a119a40a3fd7db25b | Triage

Sharing

General

Target

20f88e572a9e4f7b2f329a59ce662060N.exe
Size

44KB
Sample

240821-vap1ystajq
MD5

20f88e572a9e4f7b2f329a59ce662060
SHA1

1c51149b5b82c0ec18a99312d9331c8a6bb2f23b
SHA256

4a7b344334c011cee8fe991d5e7c40d2e53be0611f5d112a119a40a3fd7db25b
SHA512

39a46fbf71ac514660ed6337346d7246f7305755badb9384f0a38d207ae8f161e04f37c9a125adf8dde07b739e130195c37e0b9088e915b4a883a386ad746ebc
SSDEEP

768:W7BlphA7pARFbhL801VvM801Vvv7cYL9r:W7ZhA7pApw03vR03v4YL9r

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  20f88e572a9e4f7b2f329a59ce662060N.exe
- Size
  
  44KB
- MD5
  
  20f88e572a9e4f7b2f329a59ce662060
- SHA1
  
  1c51149b5b82c0ec18a99312d9331c8a6bb2f23b
- SHA256
  
  4a7b344334c011cee8fe991d5e7c40d2e53be0611f5d112a119a40a3fd7db25b
- SHA512
  
  39a46fbf71ac514660ed6337346d7246f7305755badb9384f0a38d207ae8f161e04f37c9a125adf8dde07b739e130195c37e0b9088e915b4a883a386ad746ebc
- SSDEEP
  
  768:W7BlphA7pARFbhL801VvM801Vvv7cYL9r:W7ZhA7pApw03vR03v4YL9r
Score

9^/10

discovery ransomware
- Renames multiple (3230) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware