833c31e58b459058b6f5aa0588454a2c28854242aa9a5f45d287a4a9cd990ee7 | Triage

Sharing

General

Target

e58e52eb424c20f49307c6912d1cea60N.exe
Size

238KB
Sample

240824-gzmegayenj
MD5

e58e52eb424c20f49307c6912d1cea60
SHA1

0e10fa6b548e589fcb45ddb3afc18737d342e345
SHA256

833c31e58b459058b6f5aa0588454a2c28854242aa9a5f45d287a4a9cd990ee7
SHA512

74656e5d742caf7891b5c7703d27ad713d3de123143ce3432ce5e631ccd7dd3cd0225b5c6515d8c9b8448a9bdfc15f4cb432771e2ab02c0121da5e91062c8e6f
SSDEEP

768:W7BlphA7pARFbhKKVeIuKVeIBt+OKObYhnKhnZS+2w4Vqx0VqxzFtF2TZpe:W7ZhA7pApBt+OKOsZKZZSjw4Vc0Vcye

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  e58e52eb424c20f49307c6912d1cea60N.exe
- Size
  
  238KB
- MD5
  
  e58e52eb424c20f49307c6912d1cea60
- SHA1
  
  0e10fa6b548e589fcb45ddb3afc18737d342e345
- SHA256
  
  833c31e58b459058b6f5aa0588454a2c28854242aa9a5f45d287a4a9cd990ee7
- SHA512
  
  74656e5d742caf7891b5c7703d27ad713d3de123143ce3432ce5e631ccd7dd3cd0225b5c6515d8c9b8448a9bdfc15f4cb432771e2ab02c0121da5e91062c8e6f
- SSDEEP
  
  768:W7BlphA7pARFbhKKVeIuKVeIBt+OKObYhnKhnZS+2w4Vqx0VqxzFtF2TZpe:W7ZhA7pApBt+OKOsZKZZSjw4Vc0Vcye
Score

9^/10

discovery ransomware
- Renames multiple (227) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware