d23d89632843d0656a65abf592da45936830d99305f3eebae75ce7320b18621a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

181611b26c6837df6133405b620562f0N.exe
Size

82KB
Sample

240902-sztdkavaqd
MD5

181611b26c6837df6133405b620562f0
SHA1

5cb6c0099343c88239b79ba83f6572c9fe7e7bf0
SHA256

d23d89632843d0656a65abf592da45936830d99305f3eebae75ce7320b18621a
SHA512

ee8bf6f19641a2bde31a3c9299bd50ae65efff5024956335ba6a946b93c07d92f09061be35231f76752e7bb969712802e896dddc18573a237a0cbce65c37f516
SSDEEP

1536:W7ZhA7pApvOsOKM4HBhaGwOQ54xEIjlfCp:6e7WpRaSljy

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  181611b26c6837df6133405b620562f0N.exe
- Size
  
  82KB
- MD5
  
  181611b26c6837df6133405b620562f0
- SHA1
  
  5cb6c0099343c88239b79ba83f6572c9fe7e7bf0
- SHA256
  
  d23d89632843d0656a65abf592da45936830d99305f3eebae75ce7320b18621a
- SHA512
  
  ee8bf6f19641a2bde31a3c9299bd50ae65efff5024956335ba6a946b93c07d92f09061be35231f76752e7bb969712802e896dddc18573a237a0cbce65c37f516
- SSDEEP
  
  1536:W7ZhA7pApvOsOKM4HBhaGwOQ54xEIjlfCp:6e7WpRaSljy
Score

9^/10

discovery ransomware
- Renames multiple (3155) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware