0f0dee93fe91bbf3df4cead93412e0c4860770f7d7b831e669b96f0730a59cc7 | Triage

Sharing

General

Target

caa31ae2f84af4cf5cd4d3cee5f16420N.exe
Size

39KB
Sample

240823-wy2kbs1enj
MD5

caa31ae2f84af4cf5cd4d3cee5f16420
SHA1

fba78846d97ed8ddf9e694ae3928bd60827795ff
SHA256

0f0dee93fe91bbf3df4cead93412e0c4860770f7d7b831e669b96f0730a59cc7
SHA512

a64533d6a3460a4f37b901588177cf84b5cefe8eca1f8abb93c520301b4336869353dc470d55215c16c060083e0ef8fbed4aa397284537ea9b3e139ee1982a05
SSDEEP

768:W7BlphA7pARFbhM0Kkq81LOyq81LOl6Sl5lsStWyWL:W7ZhA7pApM21LOA1LOl6vSK

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  caa31ae2f84af4cf5cd4d3cee5f16420N.exe
- Size
  
  39KB
- MD5
  
  caa31ae2f84af4cf5cd4d3cee5f16420
- SHA1
  
  fba78846d97ed8ddf9e694ae3928bd60827795ff
- SHA256
  
  0f0dee93fe91bbf3df4cead93412e0c4860770f7d7b831e669b96f0730a59cc7
- SHA512
  
  a64533d6a3460a4f37b901588177cf84b5cefe8eca1f8abb93c520301b4336869353dc470d55215c16c060083e0ef8fbed4aa397284537ea9b3e139ee1982a05
- SSDEEP
  
  768:W7BlphA7pARFbhM0Kkq81LOyq81LOl6Sl5lsStWyWL:W7ZhA7pApM21LOA1LOl6vSK
Score

9^/10

discovery ransomware
- Renames multiple (3204) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware