581f85f14555701339a7fdf324450a72124d3f8c96d3283802a256e17883a929 | Triage

Sharing

General

Target

594a07cf43794cb57526fa69571ad310N.exe
Size

79KB
Sample

240905-pxw5wssajd
MD5

594a07cf43794cb57526fa69571ad310
SHA1

30fab35081ed5f7a88bf0d8d629b51fab687f9d7
SHA256

581f85f14555701339a7fdf324450a72124d3f8c96d3283802a256e17883a929
SHA512

61f40e6b35c520a6f5a3cc7cdcbe0eab516f217d492eeba50cd51c7e3264ba52497bb4e7b7655460e9a76cdc8169af64393d71ed309d0f6c70ea66db3df5d0f4
SSDEEP

768:/7BlpQpARFbhIYJIJDYJIJPfFpsJcFfFpsJcC+3mC+3meDAfABJ6fABJwEXBwzEq:/7ZQpApze+eJfFpsJOfFpsJ5DCj3Jj3f

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  594a07cf43794cb57526fa69571ad310N.exe
- Size
  
  79KB
- MD5
  
  594a07cf43794cb57526fa69571ad310
- SHA1
  
  30fab35081ed5f7a88bf0d8d629b51fab687f9d7
- SHA256
  
  581f85f14555701339a7fdf324450a72124d3f8c96d3283802a256e17883a929
- SHA512
  
  61f40e6b35c520a6f5a3cc7cdcbe0eab516f217d492eeba50cd51c7e3264ba52497bb4e7b7655460e9a76cdc8169af64393d71ed309d0f6c70ea66db3df5d0f4
- SSDEEP
  
  768:/7BlpQpARFbhIYJIJDYJIJPfFpsJcFfFpsJcC+3mC+3meDAfABJ6fABJwEXBwzEq:/7ZQpApze+eJfFpsJOfFpsJ5DCj3Jj3f
Score

9^/10

discovery ransomware
- Renames multiple (3201) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware