7eed1bf9207b97ea0799b9d6764840998fa64dfcc4b28a310a1c6b35590e97e3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db1c728d92e6e0adc7b303286d43f580N.exe
Size

49KB
Sample

240901-w8gynsycrm
MD5

db1c728d92e6e0adc7b303286d43f580
SHA1

2114addf7f7ef54a003a6f01bc71e778e2ba6997
SHA256

7eed1bf9207b97ea0799b9d6764840998fa64dfcc4b28a310a1c6b35590e97e3
SHA512

e022b0c6c85f8ab01a85584196a38e98a39d126cb2c0ed923a343f03df6680e3fe6ca519e08f6905c9ed53a1492b99429d634afbcbb0d5e74553eaf5cc9bfd4c
SSDEEP

768:W7BlphA7pARFbhM0Kkq81LOyq81LOl6Sl5lsSwVEVrTfdi1x7Tfdi1xm:W7ZhA7pApM21LOA1LOl6vSBTo/Toq

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  db1c728d92e6e0adc7b303286d43f580N.exe
- Size
  
  49KB
- MD5
  
  db1c728d92e6e0adc7b303286d43f580
- SHA1
  
  2114addf7f7ef54a003a6f01bc71e778e2ba6997
- SHA256
  
  7eed1bf9207b97ea0799b9d6764840998fa64dfcc4b28a310a1c6b35590e97e3
- SHA512
  
  e022b0c6c85f8ab01a85584196a38e98a39d126cb2c0ed923a343f03df6680e3fe6ca519e08f6905c9ed53a1492b99429d634afbcbb0d5e74553eaf5cc9bfd4c
- SSDEEP
  
  768:W7BlphA7pARFbhM0Kkq81LOyq81LOl6Sl5lsSwVEVrTfdi1x7Tfdi1xm:W7ZhA7pApM21LOA1LOl6vSBTo/Toq
Score

9^/10

discovery ransomware
- Renames multiple (2906) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware