b3782a404539790b14db0fdfc9611e4866a3e444359953986d66bcdd7dc706c9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20aafaffc88d9547c57ca5ed4b73ff20N.exe
Size

74KB
Sample

240823-y47pmswgqq
MD5

20aafaffc88d9547c57ca5ed4b73ff20
SHA1

77032358267edacfba32ef72a4cd1b45fcc60b90
SHA256

b3782a404539790b14db0fdfc9611e4866a3e444359953986d66bcdd7dc706c9
SHA512

5a7c0c51d0dacb5b470ec3f94e20cc4b10f266a17688151da1e6a1e181b00b4fcc8412654c3ad59e64b2977ab92e8cd1ff7452dfad127c36972cc196e4eadcc0
SSDEEP

1536:W7ZNLpApCZrt8PWGoPWGANdN+hEwHwDvZvKfj6T:6NLWpCZIzjwHwYf6

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  20aafaffc88d9547c57ca5ed4b73ff20N.exe
- Size
  
  74KB
- MD5
  
  20aafaffc88d9547c57ca5ed4b73ff20
- SHA1
  
  77032358267edacfba32ef72a4cd1b45fcc60b90
- SHA256
  
  b3782a404539790b14db0fdfc9611e4866a3e444359953986d66bcdd7dc706c9
- SHA512
  
  5a7c0c51d0dacb5b470ec3f94e20cc4b10f266a17688151da1e6a1e181b00b4fcc8412654c3ad59e64b2977ab92e8cd1ff7452dfad127c36972cc196e4eadcc0
- SSDEEP
  
  1536:W7ZNLpApCZrt8PWGoPWGANdN+hEwHwDvZvKfj6T:6NLWpCZIzjwHwYf6
Score

9^/10

discovery ransomware
- Renames multiple (3076) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware