99bba6ca2ea8d6315bccb87d2703530e3ef94fb748c543db5bc5921c644e8580 | Triage

Sharing

General

Target

a7709cd7b37e9912885cb59a6b481d50N.exe
Size

61KB
Sample

240822-144n4ashlk
MD5

a7709cd7b37e9912885cb59a6b481d50
SHA1

f18b8d5f62bf12f4568fbb37a443e592d35bc1fd
SHA256

99bba6ca2ea8d6315bccb87d2703530e3ef94fb748c543db5bc5921c644e8580
SHA512

8a67aa552569d42748cb9c4a576aa9f7569c5a0c5671ba205abbe32d8c06598ebabfd2a282a70a3df005bb455ac80d96eb02e532698734eed0c9993c23e4d858
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfpVF/MF/3Nw/Nwk0cEMdV8IEMdV85/w:W7ZppApBULcfpHLcfpX2/Nw/NwmxL

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  a7709cd7b37e9912885cb59a6b481d50N.exe
- Size
  
  61KB
- MD5
  
  a7709cd7b37e9912885cb59a6b481d50
- SHA1
  
  f18b8d5f62bf12f4568fbb37a443e592d35bc1fd
- SHA256
  
  99bba6ca2ea8d6315bccb87d2703530e3ef94fb748c543db5bc5921c644e8580
- SHA512
  
  8a67aa552569d42748cb9c4a576aa9f7569c5a0c5671ba205abbe32d8c06598ebabfd2a282a70a3df005bb455ac80d96eb02e532698734eed0c9993c23e4d858
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfpVF/MF/3Nw/Nwk0cEMdV8IEMdV85/w:W7ZppApBULcfpHLcfpX2/Nw/NwmxL
Score

9^/10

discovery ransomware
- Renames multiple (3276) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware