768df384901cd5f999b95fe3030e9f6d2d477dcd2fe11ea21ec2056755d8322c | Triage

Sharing

General

Target

04ad64d7a693b1b3f0cadf082bafb520N.exe
Size

52KB
Sample

240902-mtz19sycjp
MD5

04ad64d7a693b1b3f0cadf082bafb520
SHA1

84e778cb92605872dac89f54c79daa5c3dba2209
SHA256

768df384901cd5f999b95fe3030e9f6d2d477dcd2fe11ea21ec2056755d8322c
SHA512

94658c86de81d88eed464f464d30bdb578990ac2f8bbd5f0f675bb19a9d5ea2712af18238a595d32eb6c419eecbfd59a1607d6a96329aa6c61dd24f3f8d324e4
SSDEEP

768:W7Blp2sspARFbh5YSfffynfWK9WKDxf6Qr:W7Z2sspAp5YSfffyneKIK56O

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  04ad64d7a693b1b3f0cadf082bafb520N.exe
- Size
  
  52KB
- MD5
  
  04ad64d7a693b1b3f0cadf082bafb520
- SHA1
  
  84e778cb92605872dac89f54c79daa5c3dba2209
- SHA256
  
  768df384901cd5f999b95fe3030e9f6d2d477dcd2fe11ea21ec2056755d8322c
- SHA512
  
  94658c86de81d88eed464f464d30bdb578990ac2f8bbd5f0f675bb19a9d5ea2712af18238a595d32eb6c419eecbfd59a1607d6a96329aa6c61dd24f3f8d324e4
- SSDEEP
  
  768:W7Blp2sspARFbh5YSfffynfWK9WKDxf6Qr:W7Z2sspAp5YSfffyneKIK56O
Score

9^/10

discovery ransomware
- Renames multiple (3249) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware