7d4a74bbf7ae786666fee0cf14f6501b5e790bd2319f6efc90b5fcc1386e3ad0 | Triage

Sharing

General

Target

4259a238861bf396a4af082e05902850N.exe
Size

48KB
Sample

240901-qmheessbqd
MD5

4259a238861bf396a4af082e05902850
SHA1

db81d06066418d0d0a52e3563fca660030d87ca5
SHA256

7d4a74bbf7ae786666fee0cf14f6501b5e790bd2319f6efc90b5fcc1386e3ad0
SHA512

2f14610dbab6e276a1cfbe350eea9144c4fd5d467f897fd0189a73712a4faf197133c78fad7ceaae25378ee7825c8765c4c3b0b2afc32bffb8e021795bb17338
SSDEEP

384:yBs7Br5xjL8AgA71FbhvPvD4Qfxd4QfxlQoVeDQoVer:/7BlpQpARFbh3vzfxRfxlQoVeDQoVer

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  4259a238861bf396a4af082e05902850N.exe
- Size
  
  48KB
- MD5
  
  4259a238861bf396a4af082e05902850
- SHA1
  
  db81d06066418d0d0a52e3563fca660030d87ca5
- SHA256
  
  7d4a74bbf7ae786666fee0cf14f6501b5e790bd2319f6efc90b5fcc1386e3ad0
- SHA512
  
  2f14610dbab6e276a1cfbe350eea9144c4fd5d467f897fd0189a73712a4faf197133c78fad7ceaae25378ee7825c8765c4c3b0b2afc32bffb8e021795bb17338
- SSDEEP
  
  384:yBs7Br5xjL8AgA71FbhvPvD4Qfxd4QfxlQoVeDQoVer:/7BlpQpARFbh3vzfxRfxlQoVeDQoVer
Score

9^/10

discovery ransomware
- Renames multiple (3208) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware