ce195ced486637b9c058fbf1a8ccdf3189849d556c6c0ee6319629e211accc90 | Triage

Sharing

General

Target

04977d8f002efe5bd41927712007b650N.exe
Size

48KB
Sample

240905-pga8gs1fjd
MD5

04977d8f002efe5bd41927712007b650
SHA1

b265ec2f4d314bb96ef75df169fcecab85ad9e94
SHA256

ce195ced486637b9c058fbf1a8ccdf3189849d556c6c0ee6319629e211accc90
SHA512

4c72d5d95439211b7b387cbf5ab39cf92af10dd7e733764f3c439c434e0c1507c7a8b1fc482ac77f7328d48f4d3bd595295e7b31301d8bf08844ec6d1238ac66
SSDEEP

1536:W7ZppApBULcfpHLcfpyDDnTxASYnTxASshJ6X:6pWpBwchcwDDnTxASYnTxASN

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  04977d8f002efe5bd41927712007b650N.exe
- Size
  
  48KB
- MD5
  
  04977d8f002efe5bd41927712007b650
- SHA1
  
  b265ec2f4d314bb96ef75df169fcecab85ad9e94
- SHA256
  
  ce195ced486637b9c058fbf1a8ccdf3189849d556c6c0ee6319629e211accc90
- SHA512
  
  4c72d5d95439211b7b387cbf5ab39cf92af10dd7e733764f3c439c434e0c1507c7a8b1fc482ac77f7328d48f4d3bd595295e7b31301d8bf08844ec6d1238ac66
- SSDEEP
  
  1536:W7ZppApBULcfpHLcfpyDDnTxASYnTxASshJ6X:6pWpBwchcwDDnTxASYnTxASN
Score

9^/10

discovery ransomware
- Renames multiple (3168) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware