3a79c22de6144d9ecc4a5a48ed944b4ffd4b5214ecceac5edb6868fba0ef97c3 | Triage

Sharing

General

Target

2a7d2101c8154f1dff617cb0a49aa8f0N.exe
Size

41KB
Sample

240902-mvglbazapa
MD5

2a7d2101c8154f1dff617cb0a49aa8f0
SHA1

8f9247ebcad94bef07306c420dea1ad1b71525d0
SHA256

3a79c22de6144d9ecc4a5a48ed944b4ffd4b5214ecceac5edb6868fba0ef97c3
SHA512

69b174510f1969f8a90dd20e768274a871356e33ec6678b857fd364145087f7bed44414681dec821c8ba1651e3e7802efcc07bf2be1638adfd1d1ff5b4a1e39a
SSDEEP

192:tACUADIY0Br5xjL/FAgAQmP1oynLb22v7b22vZ11F1pJ3P30k:GBt7Br5xjL9AgA71Fbhv7bhvZ11F1nPV

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  2a7d2101c8154f1dff617cb0a49aa8f0N.exe
- Size
  
  41KB
- MD5
  
  2a7d2101c8154f1dff617cb0a49aa8f0
- SHA1
  
  8f9247ebcad94bef07306c420dea1ad1b71525d0
- SHA256
  
  3a79c22de6144d9ecc4a5a48ed944b4ffd4b5214ecceac5edb6868fba0ef97c3
- SHA512
  
  69b174510f1969f8a90dd20e768274a871356e33ec6678b857fd364145087f7bed44414681dec821c8ba1651e3e7802efcc07bf2be1638adfd1d1ff5b4a1e39a
- SSDEEP
  
  192:tACUADIY0Br5xjL/FAgAQmP1oynLb22v7b22vZ11F1pJ3P30k:GBt7Br5xjL9AgA71Fbhv7bhvZ11F1nPV
Score

9^/10

discovery ransomware
- Renames multiple (3436) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware