4c982b23679a7c6a3e25ebb5bec66ea84c680180643f724b6245a7ade96111b8 | Triage

Sharing

General

Target

88aca0a893eb3a397efd9624a0b1b160N.exe
Size

190KB
Sample

240902-m63ypazcmb
MD5

88aca0a893eb3a397efd9624a0b1b160
SHA1

ae109ece23d97d5461f4aa30354fbb0df4a9b1dd
SHA256

4c982b23679a7c6a3e25ebb5bec66ea84c680180643f724b6245a7ade96111b8
SHA512

ee2e5ac0ed16be1df93cd915c52498114e0e91893dee9fb18fb8f4c6d08bd72d152fd71906e9b4b9f79dbc98ec4d38aa402af894e400fbd9549177a9407648c5
SSDEEP

3072:6e7WpMNca3rytOkWpXfnYRl2l/9HSFHzJ0lBgnW59XGww:RqKB+tOkWKR0iJ0MnW5Eww

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  88aca0a893eb3a397efd9624a0b1b160N.exe
- Size
  
  190KB
- MD5
  
  88aca0a893eb3a397efd9624a0b1b160
- SHA1
  
  ae109ece23d97d5461f4aa30354fbb0df4a9b1dd
- SHA256
  
  4c982b23679a7c6a3e25ebb5bec66ea84c680180643f724b6245a7ade96111b8
- SHA512
  
  ee2e5ac0ed16be1df93cd915c52498114e0e91893dee9fb18fb8f4c6d08bd72d152fd71906e9b4b9f79dbc98ec4d38aa402af894e400fbd9549177a9407648c5
- SSDEEP
  
  3072:6e7WpMNca3rytOkWpXfnYRl2l/9HSFHzJ0lBgnW59XGww:RqKB+tOkWKR0iJ0MnW5Eww
Score

9^/10

discovery ransomware
- Renames multiple (2697) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware