b64255f2032d2a5ee50cb1b280094b058554dc1e3a7d66ac1804d2f54d3c2b3d | Triage

Sharing

General

Target

4973978199dd0533f64437563b2558c0N.exe
Size

49KB
Sample

240903-cwjf7awcmb
MD5

4973978199dd0533f64437563b2558c0
SHA1

0117c7f6185e31640e29139d742defee63e54656
SHA256

b64255f2032d2a5ee50cb1b280094b058554dc1e3a7d66ac1804d2f54d3c2b3d
SHA512

d0c0fba1296d3441674afd953a2863af22001feb688131f4d890c825936265f64163bb20cca9479f5ced97e0ecda531fee4641e1dde0ca0491cbd227ef2e52e4
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFcdyGdyQ:W7ZppApBULcfpHLcfpyDcdyGdyQ

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  4973978199dd0533f64437563b2558c0N.exe
- Size
  
  49KB
- MD5
  
  4973978199dd0533f64437563b2558c0
- SHA1
  
  0117c7f6185e31640e29139d742defee63e54656
- SHA256
  
  b64255f2032d2a5ee50cb1b280094b058554dc1e3a7d66ac1804d2f54d3c2b3d
- SHA512
  
  d0c0fba1296d3441674afd953a2863af22001feb688131f4d890c825936265f64163bb20cca9479f5ced97e0ecda531fee4641e1dde0ca0491cbd227ef2e52e4
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFcdyGdyQ:W7ZppApBULcfpHLcfpyDcdyGdyQ
Score

9^/10

discovery ransomware
- Renames multiple (3256) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware