b5282cb0cb15b8ea03c9a78062b88893c9e8c777b04239c17adc99a6374af38b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec8d6dc11834d619b41acf29aa406000N.exe
Size

74KB
Sample

240906-qp6j2azalf
MD5

ec8d6dc11834d619b41acf29aa406000
SHA1

393a4ae602bda498e45f2bfceca4cb3d8d368761
SHA256

b5282cb0cb15b8ea03c9a78062b88893c9e8c777b04239c17adc99a6374af38b
SHA512

bd12e2daa34a60aecfe81f3cd733708cb55f14f8e670072d9a167550f7868979c6c61f6855cc857c0f0f8ff32d216b35e64e57cb29397dfe22b04902fd9ae38b
SSDEEP

1536:W7ZhA7pApvOsOKk4HBhaGwOQ54xEINC9g:6e7WpJaSlN

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  ec8d6dc11834d619b41acf29aa406000N.exe
- Size
  
  74KB
- MD5
  
  ec8d6dc11834d619b41acf29aa406000
- SHA1
  
  393a4ae602bda498e45f2bfceca4cb3d8d368761
- SHA256
  
  b5282cb0cb15b8ea03c9a78062b88893c9e8c777b04239c17adc99a6374af38b
- SHA512
  
  bd12e2daa34a60aecfe81f3cd733708cb55f14f8e670072d9a167550f7868979c6c61f6855cc857c0f0f8ff32d216b35e64e57cb29397dfe22b04902fd9ae38b
- SSDEEP
  
  1536:W7ZhA7pApvOsOKk4HBhaGwOQ54xEINC9g:6e7WpJaSlN
Score

9^/10

discovery ransomware
- Renames multiple (2887) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware