797b3f6b2ab081745d822ee2f1cba8953b9c195b2a5f1538b22146c2c04f8a9c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

778c427eb83800006dbca789e3bc9b10N.exe
Size

42KB
Sample

240822-zhx4razbpk
MD5

778c427eb83800006dbca789e3bc9b10
SHA1

e30b1c6f94d6c49fa32503ef9e6b62af6fc94dcd
SHA256

797b3f6b2ab081745d822ee2f1cba8953b9c195b2a5f1538b22146c2c04f8a9c
SHA512

bbf5313ee67ca3989a30953746a14d2b477bb59d516197f506ccd7d40191274f7c20c4d735b0b1ead98ebaf38ea4cb6dfba55d54d76af394ca5cd621d8500afb
SSDEEP

768:W7BlphA7pARFbhM0Kkq81LOyq81LOl6Sl5lsSi45orfxDO45orfxDF:W7ZhA7pApM21LOA1LOl6vS15orfxDZ5Q

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  778c427eb83800006dbca789e3bc9b10N.exe
- Size
  
  42KB
- MD5
  
  778c427eb83800006dbca789e3bc9b10
- SHA1
  
  e30b1c6f94d6c49fa32503ef9e6b62af6fc94dcd
- SHA256
  
  797b3f6b2ab081745d822ee2f1cba8953b9c195b2a5f1538b22146c2c04f8a9c
- SHA512
  
  bbf5313ee67ca3989a30953746a14d2b477bb59d516197f506ccd7d40191274f7c20c4d735b0b1ead98ebaf38ea4cb6dfba55d54d76af394ca5cd621d8500afb
- SSDEEP
  
  768:W7BlphA7pARFbhM0Kkq81LOyq81LOl6Sl5lsSi45orfxDO45orfxDF:W7ZhA7pApM21LOA1LOl6vS15orfxDZ5Q
Score

9^/10

discovery ransomware
- Renames multiple (3449) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware