cd0677f3bd29ea5b98547606cb963819ecb335bf5f9535e9381971125aac219a | Triage

Sharing

General

Target

49a0997378bbc56ad07ddd97b0348850N.exe
Size

100KB
Sample

240903-klyr5ascqm
MD5

49a0997378bbc56ad07ddd97b0348850
SHA1

6885421e0b4358c6c13b8f0fd2adad83a255a889
SHA256

cd0677f3bd29ea5b98547606cb963819ecb335bf5f9535e9381971125aac219a
SHA512

e2af72b7959870863de98db449edcef6c5e6175274049657312eecc3916ff696224451a5993dac915aacaf6d27d9695cb15fdc7a05191d8150815b457c4a8e59
SSDEEP

1536:W7ZDpApYbWjIlE77ufL2e+efZwZQ/8S/8z3MLY:6DWpwE7oL2e+efZwZ08i8z3MLY

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  49a0997378bbc56ad07ddd97b0348850N.exe
- Size
  
  100KB
- MD5
  
  49a0997378bbc56ad07ddd97b0348850
- SHA1
  
  6885421e0b4358c6c13b8f0fd2adad83a255a889
- SHA256
  
  cd0677f3bd29ea5b98547606cb963819ecb335bf5f9535e9381971125aac219a
- SHA512
  
  e2af72b7959870863de98db449edcef6c5e6175274049657312eecc3916ff696224451a5993dac915aacaf6d27d9695cb15fdc7a05191d8150815b457c4a8e59
- SSDEEP
  
  1536:W7ZDpApYbWjIlE77ufL2e+efZwZQ/8S/8z3MLY:6DWpwE7oL2e+efZwZ08i8z3MLY
Score

9^/10

discovery ransomware
- Renames multiple (3072) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware