215d3469107969e265af632fe7a8f9e66fcce94fe005d21f4385b590ace225d6 | Triage

Sharing

General

Target

967bc82428f80010af0b3bdd4b076b60N.exe
Size

39KB
Sample

240823-hlsvrszglh
MD5

967bc82428f80010af0b3bdd4b076b60
SHA1

c7ddbc28dd5594ca54ac2377865175fec90f443b
SHA256

215d3469107969e265af632fe7a8f9e66fcce94fe005d21f4385b590ace225d6
SHA512

88dc48fd5763e9dd12299fc2046d9cbf1d2c314e3a36d47959662d4d0cae81b08314ca2c468ce64758e463730c1c651bced9d3f9a689a7e4be15ed364c6b17d2
SSDEEP

768:/7BlpQpARFbhS1012oN+OiJGfOiJfoN+OiJGfOiJM:/7ZQpApjbKbc

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  967bc82428f80010af0b3bdd4b076b60N.exe
- Size
  
  39KB
- MD5
  
  967bc82428f80010af0b3bdd4b076b60
- SHA1
  
  c7ddbc28dd5594ca54ac2377865175fec90f443b
- SHA256
  
  215d3469107969e265af632fe7a8f9e66fcce94fe005d21f4385b590ace225d6
- SHA512
  
  88dc48fd5763e9dd12299fc2046d9cbf1d2c314e3a36d47959662d4d0cae81b08314ca2c468ce64758e463730c1c651bced9d3f9a689a7e4be15ed364c6b17d2
- SSDEEP
  
  768:/7BlpQpARFbhS1012oN+OiJGfOiJfoN+OiJGfOiJM:/7ZQpApjbKbc
Score

9^/10

discovery ransomware
- Renames multiple (3322) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware