84db619e8b165f5cb372ad135bbdd002715dac4388738158db2cfe9cfcaca07d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55b2f80b7cbda214d96d1e56c1f0deb0N.exe
Size

89KB
Sample

240829-pynvxasbpf
MD5

55b2f80b7cbda214d96d1e56c1f0deb0
SHA1

979ca8b0a1fa0dd41a3682ade1e2922698c44873
SHA256

84db619e8b165f5cb372ad135bbdd002715dac4388738158db2cfe9cfcaca07d
SHA512

9c51b1ca6a7271ea0042b733a6618239d32d0654751674ae5301ec97752e6efc658874558a7e55c2dfcc430df8192db86e86a2777b579d89b5fcd3cc3850116d
SSDEEP

1536:W7ZhA7pApH9QHwtRF9qaRjvmujvmRzqzlmJgwmJg/SU3G:6e7WpHIyRF9041qw

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  55b2f80b7cbda214d96d1e56c1f0deb0N.exe
- Size
  
  89KB
- MD5
  
  55b2f80b7cbda214d96d1e56c1f0deb0
- SHA1
  
  979ca8b0a1fa0dd41a3682ade1e2922698c44873
- SHA256
  
  84db619e8b165f5cb372ad135bbdd002715dac4388738158db2cfe9cfcaca07d
- SHA512
  
  9c51b1ca6a7271ea0042b733a6618239d32d0654751674ae5301ec97752e6efc658874558a7e55c2dfcc430df8192db86e86a2777b579d89b5fcd3cc3850116d
- SSDEEP
  
  1536:W7ZhA7pApH9QHwtRF9qaRjvmujvmRzqzlmJgwmJg/SU3G:6e7WpHIyRF9041qw
Score

9^/10

discovery ransomware
- Renames multiple (3195) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware