22aaa433e29017b18ee4c6beff7a0dd7072c668ef062fd7c7a06bd1ff39c40df | Triage

Sharing

General

Target

15e02d98df58fe2f4ba00ee0978536f0N.exe
Size

53KB
Sample

240825-qk8htswdrh
MD5

15e02d98df58fe2f4ba00ee0978536f0
SHA1

d6e10c1008d900896b4bd0670fc5ceaa9b963f4b
SHA256

22aaa433e29017b18ee4c6beff7a0dd7072c668ef062fd7c7a06bd1ff39c40df
SHA512

de974e2ce2aaac6b68ed3fcfdfddb35cd6026ed6db9a47478ef06bf07ed16e54dc7916df2e46f400b1c86eaaa70816bee9adb2d21a05f94ae75646423f402aba
SSDEEP

768:/7BlpQpARFbhfyiyooa0OMiJfoa0OMiJ2kAHAZIFRD+Vy2L1IFRD+Vy2L2QW8C:/7ZQpApHz8kAHAaRfRPQS

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  15e02d98df58fe2f4ba00ee0978536f0N.exe
- Size
  
  53KB
- MD5
  
  15e02d98df58fe2f4ba00ee0978536f0
- SHA1
  
  d6e10c1008d900896b4bd0670fc5ceaa9b963f4b
- SHA256
  
  22aaa433e29017b18ee4c6beff7a0dd7072c668ef062fd7c7a06bd1ff39c40df
- SHA512
  
  de974e2ce2aaac6b68ed3fcfdfddb35cd6026ed6db9a47478ef06bf07ed16e54dc7916df2e46f400b1c86eaaa70816bee9adb2d21a05f94ae75646423f402aba
- SSDEEP
  
  768:/7BlpQpARFbhfyiyooa0OMiJfoa0OMiJ2kAHAZIFRD+Vy2L1IFRD+Vy2L2QW8C:/7ZQpApHz8kAHAaRfRPQS
Score

9^/10

discovery ransomware
- Renames multiple (3267) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware