2a5715d4b8c9cd44d348da02c64b8232bf773fa4f03a746be0ae489be39e5e1c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef19403982ddbb0412357a4025c804e0N.exe
Size

43KB
Sample

240901-eg46fs1end
MD5

ef19403982ddbb0412357a4025c804e0
SHA1

0e6da1a2078730471e0042296aee12611f8523c3
SHA256

2a5715d4b8c9cd44d348da02c64b8232bf773fa4f03a746be0ae489be39e5e1c
SHA512

281969c3afc2b50fb6d86480464815ec4d121627f9f5c1a6ea6b9762e601969bd51a255a565a6d03fd45d0649ced24308b9224969163aed3a9d9a7b374886f30
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFjqAJLOqAJLwBu:W7ZppApBULcfpHLcfpyDI

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  ef19403982ddbb0412357a4025c804e0N.exe
- Size
  
  43KB
- MD5
  
  ef19403982ddbb0412357a4025c804e0
- SHA1
  
  0e6da1a2078730471e0042296aee12611f8523c3
- SHA256
  
  2a5715d4b8c9cd44d348da02c64b8232bf773fa4f03a746be0ae489be39e5e1c
- SHA512
  
  281969c3afc2b50fb6d86480464815ec4d121627f9f5c1a6ea6b9762e601969bd51a255a565a6d03fd45d0649ced24308b9224969163aed3a9d9a7b374886f30
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFjqAJLOqAJLwBu:W7ZppApBULcfpHLcfpyDI
Score

9^/10

discovery ransomware
- Renames multiple (3341) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware