a8a30d9df7a22520dbe7492f9592030da6571c6cacc6b03329f5e7960503cb60 | Triage

Sharing

General

Target

29a05a7e944077283f353dcf73c99810N.exe
Size

47KB
Sample

240906-3cvyzssgqp
MD5

29a05a7e944077283f353dcf73c99810
SHA1

ba7b2937d3a96ee764755d089f843a53f1fc8dfb
SHA256

a8a30d9df7a22520dbe7492f9592030da6571c6cacc6b03329f5e7960503cb60
SHA512

b3a79401fde67e85dba627d4d9d9fe7cd0e8da4773a7f173a0990021a4edc6f3a374eba74f015c57b163d398c10bf7df3a1d5b1b903154dcc41b99f45c3ba704
SSDEEP

384:GBt7Br5xjL9AgA71FbhvuNBN10wpAp/lvolGClvolGwTCus7sj0h3MM0h3Mm:W7BlpppARFbhbt7Y7wTCg0hcM0hcm

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  29a05a7e944077283f353dcf73c99810N.exe
- Size
  
  47KB
- MD5
  
  29a05a7e944077283f353dcf73c99810
- SHA1
  
  ba7b2937d3a96ee764755d089f843a53f1fc8dfb
- SHA256
  
  a8a30d9df7a22520dbe7492f9592030da6571c6cacc6b03329f5e7960503cb60
- SHA512
  
  b3a79401fde67e85dba627d4d9d9fe7cd0e8da4773a7f173a0990021a4edc6f3a374eba74f015c57b163d398c10bf7df3a1d5b1b903154dcc41b99f45c3ba704
- SSDEEP
  
  384:GBt7Br5xjL9AgA71FbhvuNBN10wpAp/lvolGClvolGwTCus7sj0h3MM0h3Mm:W7BlpppARFbhbt7Y7wTCg0hcM0hcm
Score

9^/10

discovery ransomware
- Renames multiple (337) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware