26ef37e067861a5964c5b9bd1e46ccebea687e68e3363c2e19cc52ff78899c07 | Triage

Sharing

General

Target

3a8134922855510a554599f1e2b3f7f0N.exe
Size

53KB
Sample

240902-d2krwazhkq
MD5

3a8134922855510a554599f1e2b3f7f0
SHA1

33f2dca64faec7fe10483559660a64a641408e99
SHA256

26ef37e067861a5964c5b9bd1e46ccebea687e68e3363c2e19cc52ff78899c07
SHA512

816557c405a78f8e0bcaf4019f602b5dfde63beb4bbbbff31b99bd1a6825dff340b94db360c9df0c3df5ed31cde5ea568a100fda87193789567583bc1a4e7545
SSDEEP

768:W7Blp+pARFbhBgnKL+8t8NZ/JytMJytvYFsG8r8M:W7Z+pAp2nKLQJytMJytvYo4M

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  3a8134922855510a554599f1e2b3f7f0N.exe
- Size
  
  53KB
- MD5
  
  3a8134922855510a554599f1e2b3f7f0
- SHA1
  
  33f2dca64faec7fe10483559660a64a641408e99
- SHA256
  
  26ef37e067861a5964c5b9bd1e46ccebea687e68e3363c2e19cc52ff78899c07
- SHA512
  
  816557c405a78f8e0bcaf4019f602b5dfde63beb4bbbbff31b99bd1a6825dff340b94db360c9df0c3df5ed31cde5ea568a100fda87193789567583bc1a4e7545
- SSDEEP
  
  768:W7Blp+pARFbhBgnKL+8t8NZ/JytMJytvYFsG8r8M:W7Z+pAp2nKLQJytMJytvYo4M
Score

9^/10

discovery ransomware
- Renames multiple (3273) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware