636f8151a06ed5113f48f7e6ca70589acb76f9a4b53f0e6beeaab9a06efc158e | Triage

Sharing

General

Target

c050957661256499102a2c78ef8936e0N.exe
Size

66KB
Sample

240829-cy7lss1ekl
MD5

c050957661256499102a2c78ef8936e0
SHA1

3badb45a7ee008accd6d7fd7ceb2d347bb8c6538
SHA256

636f8151a06ed5113f48f7e6ca70589acb76f9a4b53f0e6beeaab9a06efc158e
SHA512

1b874e398a2baafd76e652942b524086bd6968662bc17cc0a9685833485952511a722ad80d2bfdecbe6835a333c20df5629aaf79441e4ecaad23a4888d6347fb
SSDEEP

768:W7Blp+pARFbhtlmlQ3y3RWvf+wi1x9f+wi1xBTCcX8vgCcX8vSd5hdx8WI:W7Z+pApfGQ3y3RWvfmRfm9sKsSd5o

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  c050957661256499102a2c78ef8936e0N.exe
- Size
  
  66KB
- MD5
  
  c050957661256499102a2c78ef8936e0
- SHA1
  
  3badb45a7ee008accd6d7fd7ceb2d347bb8c6538
- SHA256
  
  636f8151a06ed5113f48f7e6ca70589acb76f9a4b53f0e6beeaab9a06efc158e
- SHA512
  
  1b874e398a2baafd76e652942b524086bd6968662bc17cc0a9685833485952511a722ad80d2bfdecbe6835a333c20df5629aaf79441e4ecaad23a4888d6347fb
- SSDEEP
  
  768:W7Blp+pARFbhtlmlQ3y3RWvf+wi1x9f+wi1xBTCcX8vgCcX8vSd5hdx8WI:W7Z+pApfGQ3y3RWvfmRfm9sKsSd5o
Score

9^/10

discovery ransomware
- Renames multiple (328) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware