e7639773245bbce1eac84e22715974736e7c244dcb6b28ef178363890857285d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad1679b49b370166af91c3274776b3a0N.exe
Size

49KB
Sample

240824-jkas8ssajj
MD5

ad1679b49b370166af91c3274776b3a0
SHA1

ddd97ea8d954f8021c0a4a393f13711d7f1ddf52
SHA256

e7639773245bbce1eac84e22715974736e7c244dcb6b28ef178363890857285d
SHA512

366e7faab7f8ce8c672abbe715ad50b3d77b08d1e7c34088e33ebe7a645f3c75412c3c3beb53fa902c04cde1b0f2c8da84375cb788de671e3a0013673fd45884
SSDEEP

384:GBt7Br5xjL7lAgA71Fbhvt3h+fZmrs71I8fZmrs71IU2gP:W7Blp9pARFbhCRYstRYs8gP

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  ad1679b49b370166af91c3274776b3a0N.exe
- Size
  
  49KB
- MD5
  
  ad1679b49b370166af91c3274776b3a0
- SHA1
  
  ddd97ea8d954f8021c0a4a393f13711d7f1ddf52
- SHA256
  
  e7639773245bbce1eac84e22715974736e7c244dcb6b28ef178363890857285d
- SHA512
  
  366e7faab7f8ce8c672abbe715ad50b3d77b08d1e7c34088e33ebe7a645f3c75412c3c3beb53fa902c04cde1b0f2c8da84375cb788de671e3a0013673fd45884
- SSDEEP
  
  384:GBt7Br5xjL7lAgA71Fbhvt3h+fZmrs71I8fZmrs71IU2gP:W7Blp9pARFbhCRYstRYs8gP
Score

9^/10

discovery ransomware
- Renames multiple (413) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware