426da9ece3f77ec8b5f59494dbcb12b25c0c7ebe3084708c1f9903a403628234 | Triage

Sharing

General

Target

25a4ca27fe970f1a595a0a02b44fc2c0N.exe
Size

63KB
Sample

240906-e58tjswfmn
MD5

25a4ca27fe970f1a595a0a02b44fc2c0
SHA1

eebfb8a6cc11495a3b01342755ae6fd0f502b863
SHA256

426da9ece3f77ec8b5f59494dbcb12b25c0c7ebe3084708c1f9903a403628234
SHA512

a16ab153a10f8bca47f9acd105424805f5c7a85f3912f257bf1d5f60d15e7a148c2c27bf89b9da825ffde0f200dc6a975e6a8022fadab9cddb6db4951dcd004a
SSDEEP

384:GBt7Br5xjL9AgA71Fbhv7bhvo42L5FgAytBz9CKTbnjO9CKTbnjM:W7BlpppARFbhjbhg42LcfpCKYCKA

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  25a4ca27fe970f1a595a0a02b44fc2c0N.exe
- Size
  
  63KB
- MD5
  
  25a4ca27fe970f1a595a0a02b44fc2c0
- SHA1
  
  eebfb8a6cc11495a3b01342755ae6fd0f502b863
- SHA256
  
  426da9ece3f77ec8b5f59494dbcb12b25c0c7ebe3084708c1f9903a403628234
- SHA512
  
  a16ab153a10f8bca47f9acd105424805f5c7a85f3912f257bf1d5f60d15e7a148c2c27bf89b9da825ffde0f200dc6a975e6a8022fadab9cddb6db4951dcd004a
- SSDEEP
  
  384:GBt7Br5xjL9AgA71Fbhv7bhvo42L5FgAytBz9CKTbnjO9CKTbnjM:W7BlpppARFbhjbhg42LcfpCKYCKA
Score

9^/10

discovery ransomware
- Renames multiple (3196) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware