3e66b71b72fc1d959bbb6a1c2f8a1d41c853f63ac0e8072e06c3a5cae976baaf | Triage

Sharing

General

Target

2153fd2c6cb9b73c5de72092e192b9b0N.exe
Size

39KB
Sample

240824-p9c8js1ejg
MD5

2153fd2c6cb9b73c5de72092e192b9b0
SHA1

d8da113629f5889fc5f25a8216f6e32b1cd52792
SHA256

3e66b71b72fc1d959bbb6a1c2f8a1d41c853f63ac0e8072e06c3a5cae976baaf
SHA512

4a6f7cd9da358a996ebb5343b0f0b1903c1d5f22615687d42f0dec375d660fd24b86ff99e3e609a2bef28ab8b65fa5ad5d76f4f7808a1c51662a2d7f1deaf89a
SSDEEP

768:W7BlphA7pARFbhM0Kkq81LOyq81LORWAnWAkpUE5c5eJy:W7ZhA7pApM21LOA1LOrtkpt6v

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  2153fd2c6cb9b73c5de72092e192b9b0N.exe
- Size
  
  39KB
- MD5
  
  2153fd2c6cb9b73c5de72092e192b9b0
- SHA1
  
  d8da113629f5889fc5f25a8216f6e32b1cd52792
- SHA256
  
  3e66b71b72fc1d959bbb6a1c2f8a1d41c853f63ac0e8072e06c3a5cae976baaf
- SHA512
  
  4a6f7cd9da358a996ebb5343b0f0b1903c1d5f22615687d42f0dec375d660fd24b86ff99e3e609a2bef28ab8b65fa5ad5d76f4f7808a1c51662a2d7f1deaf89a
- SSDEEP
  
  768:W7BlphA7pARFbhM0Kkq81LOyq81LORWAnWAkpUE5c5eJy:W7ZhA7pApM21LOA1LOrtkpt6v
Score

9^/10

discovery ransomware
- Renames multiple (3189) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware