71a23964f22a8f160ba12204514e69ac8839c3e8a6ccbadea180bc34b4bfd000 | Triage

Sharing

General

Target

138c910466d85844a30520596055cee0N.exe
Size

55KB
Sample

240829-r1qhmayepl
MD5

138c910466d85844a30520596055cee0
SHA1

8d34b568763fa847f9482828d4f0ecd024f3edb8
SHA256

71a23964f22a8f160ba12204514e69ac8839c3e8a6ccbadea180bc34b4bfd000
SHA512

c661c59915a61f4a344851d870e6e6fba2fa4d8462c5347e8fc3e7b241d6cbd1c95ef9b0c2a4a6f6a4b0a9dfb94877558c940eaca0cc0195eaaffb68198615cb
SSDEEP

1536:W7ZhA7pApM21LOA1LO2c6b25gc6b25uCrbpSv6aVowfaVowZ2d:6e7WpMgLOiLO2c6b25gc6b25LaVffaVQ

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  138c910466d85844a30520596055cee0N.exe
- Size
  
  55KB
- MD5
  
  138c910466d85844a30520596055cee0
- SHA1
  
  8d34b568763fa847f9482828d4f0ecd024f3edb8
- SHA256
  
  71a23964f22a8f160ba12204514e69ac8839c3e8a6ccbadea180bc34b4bfd000
- SHA512
  
  c661c59915a61f4a344851d870e6e6fba2fa4d8462c5347e8fc3e7b241d6cbd1c95ef9b0c2a4a6f6a4b0a9dfb94877558c940eaca0cc0195eaaffb68198615cb
- SSDEEP
  
  1536:W7ZhA7pApM21LOA1LO2c6b25gc6b25uCrbpSv6aVowfaVowZ2d:6e7WpMgLOiLO2c6b25gc6b25LaVffaVQ
Score

9^/10

discovery ransomware
- Renames multiple (3192) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware