10cd287a32e47826d20fc0733f3604f8268b9a27c2fcb3089d82b054e6c7a620 | Triage

Sharing

General

Target

edfed8fc9e2ce3a535707dbbbce73620N.exe
Size

45KB
Sample

240902-dzgbns1fpa
MD5

edfed8fc9e2ce3a535707dbbbce73620
SHA1

91d4c55a6e98823fa4649a0b9e04e97e74e4a477
SHA256

10cd287a32e47826d20fc0733f3604f8268b9a27c2fcb3089d82b054e6c7a620
SHA512

9279344d37a9dc0fb35f75dec96a593dd671ee8489f0c9df0c5dcb5fcf0cb6620bff73e1ec9a62c8777c8eeb97a6cffda9123bbe87429de1296482f28e83d763
SSDEEP

384:GBt7Br5xjL9A7AgA71Fbhvnqj7jU7ubTAgpbuvx10AaIdKB7ubTAgpbuvx10AaIh:W7BlphA7pARFbhL801VvM801Vvv7cYf

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  edfed8fc9e2ce3a535707dbbbce73620N.exe
- Size
  
  45KB
- MD5
  
  edfed8fc9e2ce3a535707dbbbce73620
- SHA1
  
  91d4c55a6e98823fa4649a0b9e04e97e74e4a477
- SHA256
  
  10cd287a32e47826d20fc0733f3604f8268b9a27c2fcb3089d82b054e6c7a620
- SHA512
  
  9279344d37a9dc0fb35f75dec96a593dd671ee8489f0c9df0c5dcb5fcf0cb6620bff73e1ec9a62c8777c8eeb97a6cffda9123bbe87429de1296482f28e83d763
- SSDEEP
  
  384:GBt7Br5xjL9A7AgA71Fbhvnqj7jU7ubTAgpbuvx10AaIdKB7ubTAgpbuvx10AaIh:W7BlphA7pARFbhL801VvM801Vvv7cYf
Score

9^/10

discovery ransomware
- Renames multiple (3354) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware