caa8605f91e11fa97866de898432330fbab4e640fe192fa2a6f28ab223d77b96 | Triage

Sharing

General

Target

3ed030e6b28edd44a7013f521c8decd0N.exe
Size

75KB
Sample

240902-lz2avaxeqp
MD5

3ed030e6b28edd44a7013f521c8decd0
SHA1

66d0006410ba7081548a6d7c6861df01494c762e
SHA256

caa8605f91e11fa97866de898432330fbab4e640fe192fa2a6f28ab223d77b96
SHA512

9ac667f826b98afae0e989386b1a68fc262756e7f9d9867810046cdf7f2fd20fdd567c96de498327da0ee49f98ad8be096c3a07fb2bb11ae7c6a6ff5098df9b7
SSDEEP

384:GBt7Br5xjL9A7AgA71FbhvnwR/s4NW2sl4c3KbsvrTgOzkJAopyVFlgLfQf+PZfW:W7BlphA7pARFbhM0KW2s9B4hofAe

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  3ed030e6b28edd44a7013f521c8decd0N.exe
- Size
  
  75KB
- MD5
  
  3ed030e6b28edd44a7013f521c8decd0
- SHA1
  
  66d0006410ba7081548a6d7c6861df01494c762e
- SHA256
  
  caa8605f91e11fa97866de898432330fbab4e640fe192fa2a6f28ab223d77b96
- SHA512
  
  9ac667f826b98afae0e989386b1a68fc262756e7f9d9867810046cdf7f2fd20fdd567c96de498327da0ee49f98ad8be096c3a07fb2bb11ae7c6a6ff5098df9b7
- SSDEEP
  
  384:GBt7Br5xjL9A7AgA71FbhvnwR/s4NW2sl4c3KbsvrTgOzkJAopyVFlgLfQf+PZfW:W7BlphA7pARFbhM0KW2s9B4hofAe
Score

9^/10

discovery ransomware
- Renames multiple (3228) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware