cdc100a325396394970ced6428ad3cc3a7aecda4ff5ea41b7f80a311fd31a4d3 | Triage

Sharing

General

Target

8b5739941d1f55dd1a2a3f7239005f20N.exe
Size

43KB
Sample

240821-yfj9faxapc
MD5

8b5739941d1f55dd1a2a3f7239005f20
SHA1

b315f3374f1958971fe1c1e32c1052a331c71c9a
SHA256

cdc100a325396394970ced6428ad3cc3a7aecda4ff5ea41b7f80a311fd31a4d3
SHA512

02edb50450f10c1e613eeb5fad1fb0d5f630e54eb74afb7253b393c04239b00ba14be94cd31b3161c6e285872ad5ede6f4bc88d1ce98d61248e06be77d7a2a6a
SSDEEP

384:yBs7Br5xjL8AgA71Fbhv/F1Ue80EoVvSWqvrB/EoVvSWqvrBU:/7BlpQpARFbhzUe80ESvSWk/ESvSWkU

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  8b5739941d1f55dd1a2a3f7239005f20N.exe
- Size
  
  43KB
- MD5
  
  8b5739941d1f55dd1a2a3f7239005f20
- SHA1
  
  b315f3374f1958971fe1c1e32c1052a331c71c9a
- SHA256
  
  cdc100a325396394970ced6428ad3cc3a7aecda4ff5ea41b7f80a311fd31a4d3
- SHA512
  
  02edb50450f10c1e613eeb5fad1fb0d5f630e54eb74afb7253b393c04239b00ba14be94cd31b3161c6e285872ad5ede6f4bc88d1ce98d61248e06be77d7a2a6a
- SSDEEP
  
  384:yBs7Br5xjL8AgA71Fbhv/F1Ue80EoVvSWqvrB/EoVvSWqvrBU:/7BlpQpARFbhzUe80ESvSWk/ESvSWkU
Score

9^/10

discovery ransomware
- Renames multiple (3228) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware