a8d5d767e67ea2b4f71a406b28d8dd21700df7b15697319c9d6e38db1b0b7271 | Triage

Sharing

General

Target

230232fa248db13b0c35d2c36a2d95b0N.exe
Size

34KB
Sample

240902-28wpqazekq
MD5

230232fa248db13b0c35d2c36a2d95b0
SHA1

f67d36510cc1fae6b1831eefca35f8900d02f54c
SHA256

a8d5d767e67ea2b4f71a406b28d8dd21700df7b15697319c9d6e38db1b0b7271
SHA512

c41c373a555fa12c48d7cd5ae02b46993a36f823edcedc39de2993db4347621e0a4b9cc6c2d5bba413d4aef888508a9c258dd18d3726e7d593adacdf6f632e9f
SSDEEP

192:pACU3DIY0Br5xjL/EAgAQmP1oynLb22vB7m/FJHo7m/FJHhpqtE7Ei2+2E:yBs7Br5xjL8AgA71FbhvsiE7E4

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  230232fa248db13b0c35d2c36a2d95b0N.exe
- Size
  
  34KB
- MD5
  
  230232fa248db13b0c35d2c36a2d95b0
- SHA1
  
  f67d36510cc1fae6b1831eefca35f8900d02f54c
- SHA256
  
  a8d5d767e67ea2b4f71a406b28d8dd21700df7b15697319c9d6e38db1b0b7271
- SHA512
  
  c41c373a555fa12c48d7cd5ae02b46993a36f823edcedc39de2993db4347621e0a4b9cc6c2d5bba413d4aef888508a9c258dd18d3726e7d593adacdf6f632e9f
- SSDEEP
  
  192:pACU3DIY0Br5xjL/EAgAQmP1oynLb22vB7m/FJHo7m/FJHhpqtE7Ei2+2E:yBs7Br5xjL8AgA71FbhvsiE7E4
Score

9^/10

discovery ransomware
- Renames multiple (3285) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware