a6e9a8e9fc326464ab07d71270fcb8ac28d16f5a1f0f1f7c90846705ecc30442 | Triage

Sharing

General

Target

d5fe67e8f103632a10f8a36c7d5bc030N.exe
Size

64KB
Sample

240828-2lzsvssbmj
MD5

d5fe67e8f103632a10f8a36c7d5bc030
SHA1

870b2f02302f21ef63d2071419f2cbe0b8ab8fc0
SHA256

a6e9a8e9fc326464ab07d71270fcb8ac28d16f5a1f0f1f7c90846705ecc30442
SHA512

12db9c45bc6a9c3e67c09d3e1d1fbac5517bfa58044b29e2a54d264b91f50f1de2aae2a4e1b88e619f3e7ddd86cf2705463e116c37b84a5a3c2bca178866806e
SSDEEP

768:W7BlpppARFbhHFoqAJwBqAJw70EXBwzEXBwOvEJcvEJZzozw:W7ZppApqvZvs

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  d5fe67e8f103632a10f8a36c7d5bc030N.exe
- Size
  
  64KB
- MD5
  
  d5fe67e8f103632a10f8a36c7d5bc030
- SHA1
  
  870b2f02302f21ef63d2071419f2cbe0b8ab8fc0
- SHA256
  
  a6e9a8e9fc326464ab07d71270fcb8ac28d16f5a1f0f1f7c90846705ecc30442
- SHA512
  
  12db9c45bc6a9c3e67c09d3e1d1fbac5517bfa58044b29e2a54d264b91f50f1de2aae2a4e1b88e619f3e7ddd86cf2705463e116c37b84a5a3c2bca178866806e
- SSDEEP
  
  768:W7BlpppARFbhHFoqAJwBqAJw70EXBwzEXBwOvEJcvEJZzozw:W7ZppApqvZvs
Score

9^/10

discovery ransomware
- Renames multiple (3112) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware