c07a05756429b549e6f4c669c4f09426abc6cb283a54931b76c2844e2bab7c79 | Triage

Sharing

General

Target

1a0d744d7ba6329b85bdc454dcc3f580N.exe
Size

68KB
Sample

240902-2jw9yszgpe
MD5

1a0d744d7ba6329b85bdc454dcc3f580
SHA1

4255ec91f125a052e5c9d847ce97419487cad6f6
SHA256

c07a05756429b549e6f4c669c4f09426abc6cb283a54931b76c2844e2bab7c79
SHA512

7687a7327351327885c1e68d29173de0a1d967f05debab7ab205712e72f122b7ce2aed4d10b48472b00287dd536c4cc9136823ae916f60de4304451f6276bb45
SSDEEP

1536:W7ZhA7pApw03vR03vcltdtSsjcOdHIQJc4O:6e7WpwYRYUtdtSsl+

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  1a0d744d7ba6329b85bdc454dcc3f580N.exe
- Size
  
  68KB
- MD5
  
  1a0d744d7ba6329b85bdc454dcc3f580
- SHA1
  
  4255ec91f125a052e5c9d847ce97419487cad6f6
- SHA256
  
  c07a05756429b549e6f4c669c4f09426abc6cb283a54931b76c2844e2bab7c79
- SHA512
  
  7687a7327351327885c1e68d29173de0a1d967f05debab7ab205712e72f122b7ce2aed4d10b48472b00287dd536c4cc9136823ae916f60de4304451f6276bb45
- SSDEEP
  
  1536:W7ZhA7pApw03vR03vcltdtSsjcOdHIQJc4O:6e7WpwYRYUtdtSsl+
Score

9^/10

discovery ransomware
- Renames multiple (4370) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryransomware