3820f275672f14b6a449fa593ef5f45acf81aa42ecb2cb92dd1abb0755226662 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

244b57082f2316c2c87eba31858d1d50N.exe
Size

97KB
Sample

240904-qsg1va1bnq
MD5

244b57082f2316c2c87eba31858d1d50
SHA1

aca6fcbae804c51e0f616bb50d9a8d6cc32cbfad
SHA256

3820f275672f14b6a449fa593ef5f45acf81aa42ecb2cb92dd1abb0755226662
SHA512

9aee724dbcf5254e1a4d2cc48fa9493706e76fe991f6aeff2902ff5328255bf202c39d30c19e1e9536d2307ffa2ddb894d1ae214c99a8678db647c6898716ee9
SSDEEP

3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFslEhLfyB+:PqFF2Ie+eFYDKfnf0fgfnf0fE

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  244b57082f2316c2c87eba31858d1d50N.exe
- Size
  
  97KB
- MD5
  
  244b57082f2316c2c87eba31858d1d50
- SHA1
  
  aca6fcbae804c51e0f616bb50d9a8d6cc32cbfad
- SHA256
  
  3820f275672f14b6a449fa593ef5f45acf81aa42ecb2cb92dd1abb0755226662
- SHA512
  
  9aee724dbcf5254e1a4d2cc48fa9493706e76fe991f6aeff2902ff5328255bf202c39d30c19e1e9536d2307ffa2ddb894d1ae214c99a8678db647c6898716ee9
- SSDEEP
  
  3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFslEhLfyB+:PqFF2Ie+eFYDKfnf0fgfnf0fE
Score

9^/10

discovery ransomware
- Renames multiple (2957) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware