441f34d82b3ef1625f424bf035b2a05f787f3184ad07963caea14d3ce38429ec | Triage

Sharing

General

Target

75efdfc0445a686023aa394ea8c66430N.exe
Size

71KB
Sample

240901-25f5vsvbkn
MD5

75efdfc0445a686023aa394ea8c66430
SHA1

253594bb668a2e82fb9ee19c98f49a55dc543351
SHA256

441f34d82b3ef1625f424bf035b2a05f787f3184ad07963caea14d3ce38429ec
SHA512

00cf73b58a6a658d40427281c7e84aff4d7a3b5c8f498e620bc147ee7fa9a7eae2231f552f9ccb1011ac5a1ff104f96ce1dc4a1f99acf14e55401280afea236e
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfpVF/MF/3Nw/Nwk0cEMdV8IEMdV85/EUN6J2c:W7ZppApBULcfpHLcfpX2/Nw/NwmxBRn

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  75efdfc0445a686023aa394ea8c66430N.exe
- Size
  
  71KB
- MD5
  
  75efdfc0445a686023aa394ea8c66430
- SHA1
  
  253594bb668a2e82fb9ee19c98f49a55dc543351
- SHA256
  
  441f34d82b3ef1625f424bf035b2a05f787f3184ad07963caea14d3ce38429ec
- SHA512
  
  00cf73b58a6a658d40427281c7e84aff4d7a3b5c8f498e620bc147ee7fa9a7eae2231f552f9ccb1011ac5a1ff104f96ce1dc4a1f99acf14e55401280afea236e
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfpVF/MF/3Nw/Nwk0cEMdV8IEMdV85/EUN6J2c:W7ZppApBULcfpHLcfpX2/Nw/NwmxBRn
Score

9^/10

discovery ransomware
- Renames multiple (3178) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware