f30c81ed4b090ea9da31912bea660ea39320e9a67f9012c5474e2e2a14f9cb8c | Triage

Sharing

General

Target

b4415cac8dd4c8e0ec6bd09640c44cb0N.exe
Size

83KB
Sample

240902-nrbrbszfpb
MD5

b4415cac8dd4c8e0ec6bd09640c44cb0
SHA1

1cbbc4f2b88741b93ca9a776d754d7f200cbb5f4
SHA256

f30c81ed4b090ea9da31912bea660ea39320e9a67f9012c5474e2e2a14f9cb8c
SHA512

fc1a99b6a3ca5ed8a83a07080d5e57af1c488f1033664f3c4e59537c826ba829c39d61fcef7cbb7a53a291bf0dc47310f28b16d965cc0336b6979a1370d3b439
SSDEEP

384:yBs7Br5xjL8AgA71FbhvJUfWGUfHjtmjtd5NaMR5NaBQNNmPx/Pxv:/7BlpQpARFbhiWb8naOnaBGNS1l

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  b4415cac8dd4c8e0ec6bd09640c44cb0N.exe
- Size
  
  83KB
- MD5
  
  b4415cac8dd4c8e0ec6bd09640c44cb0
- SHA1
  
  1cbbc4f2b88741b93ca9a776d754d7f200cbb5f4
- SHA256
  
  f30c81ed4b090ea9da31912bea660ea39320e9a67f9012c5474e2e2a14f9cb8c
- SHA512
  
  fc1a99b6a3ca5ed8a83a07080d5e57af1c488f1033664f3c4e59537c826ba829c39d61fcef7cbb7a53a291bf0dc47310f28b16d965cc0336b6979a1370d3b439
- SSDEEP
  
  384:yBs7Br5xjL8AgA71FbhvJUfWGUfHjtmjtd5NaMR5NaBQNNmPx/Pxv:/7BlpQpARFbhiWb8naOnaBGNS1l
Score

9^/10

discovery ransomware
- Renames multiple (448) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware