304a0450dab0193f243aeb1efdc09fe70e0b4abb6bac75ead0dc860c2bfe7bf7 | Triage

Sharing

General

Target

d31c936a3b5c73c8b7757446455953c0N.exe
Size

52KB
Sample

240821-zwlmwazgqf
MD5

d31c936a3b5c73c8b7757446455953c0
SHA1

a8fbad138d710448c90c647ccf1f8642b73f5882
SHA256

304a0450dab0193f243aeb1efdc09fe70e0b4abb6bac75ead0dc860c2bfe7bf7
SHA512

202ef53a5810464d3716b056d540ca0cf2b31053ffb2ac3642db22f2a14d95533c6d5076654ff97a05334e1ba66988a6fffb507ce10d69c91edfd3b266f54906
SSDEEP

1536:W7ZppApBULcfpHLcfpyDoAI9yRYstRYsR:6pWpBwchcwDK9SYsLYsR

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  d31c936a3b5c73c8b7757446455953c0N.exe
- Size
  
  52KB
- MD5
  
  d31c936a3b5c73c8b7757446455953c0
- SHA1
  
  a8fbad138d710448c90c647ccf1f8642b73f5882
- SHA256
  
  304a0450dab0193f243aeb1efdc09fe70e0b4abb6bac75ead0dc860c2bfe7bf7
- SHA512
  
  202ef53a5810464d3716b056d540ca0cf2b31053ffb2ac3642db22f2a14d95533c6d5076654ff97a05334e1ba66988a6fffb507ce10d69c91edfd3b266f54906
- SSDEEP
  
  1536:W7ZppApBULcfpHLcfpyDoAI9yRYstRYsR:6pWpBwchcwDK9SYsLYsR
Score

9^/10

discovery ransomware
- Renames multiple (3188) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware