7214080e6c5017e6cc075d2a868f00f647486aca10c0fedaa62ca02cdfef3f2e | Triage

Sharing

General

Target

15b2e189a5d544eb3b35fdf206061270N.exe
Size

40KB
Sample

240905-ps5aps1hlc
MD5

15b2e189a5d544eb3b35fdf206061270
SHA1

156ab479917f5ea487d022112782ceeecb723219
SHA256

7214080e6c5017e6cc075d2a868f00f647486aca10c0fedaa62ca02cdfef3f2e
SHA512

d7c439992e052232e25d9f1ac1afb3dde0a3215dba9df0cceb14d49761b399ecde0266e28b36f05203e6d5b7fbdeb639952daa7b102cdef1bc38d73916fe3c2c
SSDEEP

768:W7BlpppARFbhjbhPKueKudLw1LC5XQozeK:W7ZppApB785XQoZ

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  15b2e189a5d544eb3b35fdf206061270N.exe
- Size
  
  40KB
- MD5
  
  15b2e189a5d544eb3b35fdf206061270
- SHA1
  
  156ab479917f5ea487d022112782ceeecb723219
- SHA256
  
  7214080e6c5017e6cc075d2a868f00f647486aca10c0fedaa62ca02cdfef3f2e
- SHA512
  
  d7c439992e052232e25d9f1ac1afb3dde0a3215dba9df0cceb14d49761b399ecde0266e28b36f05203e6d5b7fbdeb639952daa7b102cdef1bc38d73916fe3c2c
- SSDEEP
  
  768:W7BlpppARFbhjbhPKueKudLw1LC5XQozeK:W7ZppApB785XQoZ
Score

9^/10

discovery ransomware
- Renames multiple (3459) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware