47873126bd49e39e57fa019ad53b5e82c57328bf8e0cb1316c15c2404b2f0737 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

156b8f1635681b835b9995f5920d5b30N.exe
Size

48KB
Sample

240905-nwv1rs1aqd
MD5

156b8f1635681b835b9995f5920d5b30
SHA1

38cda631e8784d4b799f1a92cd014ad788b0febd
SHA256

47873126bd49e39e57fa019ad53b5e82c57328bf8e0cb1316c15c2404b2f0737
SHA512

1b104f1c5ce5bc8521f9a2bd23d72342d215b3d0dda3e6f94012719ee7b1c49d0ce4fa0646982d4af00ca7863542dabfd9c6ef1da1e06e5bd5f44e03538648e0
SSDEEP

768:W7BlphA7pARFbhM0KW2s9B4b09Xgd7jylZqzpvfw:W7ZhA7pApMaxB4b0CYZ

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  156b8f1635681b835b9995f5920d5b30N.exe
- Size
  
  48KB
- MD5
  
  156b8f1635681b835b9995f5920d5b30
- SHA1
  
  38cda631e8784d4b799f1a92cd014ad788b0febd
- SHA256
  
  47873126bd49e39e57fa019ad53b5e82c57328bf8e0cb1316c15c2404b2f0737
- SHA512
  
  1b104f1c5ce5bc8521f9a2bd23d72342d215b3d0dda3e6f94012719ee7b1c49d0ce4fa0646982d4af00ca7863542dabfd9c6ef1da1e06e5bd5f44e03538648e0
- SSDEEP
  
  768:W7BlphA7pARFbhM0KW2s9B4b09Xgd7jylZqzpvfw:W7ZhA7pApMaxB4b0CYZ
Score

9^/10

discovery ransomware
- Renames multiple (3149) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware