5d768122e1c0de22083dfdab10e2b70a7b99419d650a5351d0825473b3b29ea2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b764a3ba1eec1afad59caeb3a95a030N.exe
Size

43KB
Sample

240823-3ehfnstaqh
MD5

1b764a3ba1eec1afad59caeb3a95a030
SHA1

95c9e1e82965acbb40ae2421ecbe5d927c7f71dd
SHA256

5d768122e1c0de22083dfdab10e2b70a7b99419d650a5351d0825473b3b29ea2
SHA512

c8bf2fae21f4358f17a7764bf2312a4585b7e76dc9eea4cbb38eac3c7756df0cfd2766c9ccb0f9b1c27fc44bec0ed1f3055f5ae59942d5fb98e4b7abde787cc9
SSDEEP

768:W7BlphA7pARFbhL801VvM801Vvv7cY1KnKk:W7ZhA7pApw03vR03v4YYKk

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  1b764a3ba1eec1afad59caeb3a95a030N.exe
- Size
  
  43KB
- MD5
  
  1b764a3ba1eec1afad59caeb3a95a030
- SHA1
  
  95c9e1e82965acbb40ae2421ecbe5d927c7f71dd
- SHA256
  
  5d768122e1c0de22083dfdab10e2b70a7b99419d650a5351d0825473b3b29ea2
- SHA512
  
  c8bf2fae21f4358f17a7764bf2312a4585b7e76dc9eea4cbb38eac3c7756df0cfd2766c9ccb0f9b1c27fc44bec0ed1f3055f5ae59942d5fb98e4b7abde787cc9
- SSDEEP
  
  768:W7BlphA7pARFbhL801VvM801Vvv7cY1KnKk:W7ZhA7pApw03vR03v4YYKk
Score

9^/10

discovery ransomware
- Renames multiple (3253) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware