abda25eddda5467816585904f442a5acb3f162ff93dfe6703842924c40ca1457 | Triage

Sharing

General

Target

d564bd24a09c652945e5a41429d38ef0N.exe
Size

43KB
Sample

240906-vdzpkaxhmg
MD5

d564bd24a09c652945e5a41429d38ef0
SHA1

2f5d160ffd925355e6e25f53de6b78b731eeafb6
SHA256

abda25eddda5467816585904f442a5acb3f162ff93dfe6703842924c40ca1457
SHA512

66d33ea297a75f4ecf1797e4bbca64aa5f3e1af7358de29cfbcb492e541ce03e93a9db578f5a78d270ec43f15e4e867d37de7993b573c0a396be9b3cbf344b98
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfpW/Jbabj:W7ZppApBULcfpHLcfpr

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  d564bd24a09c652945e5a41429d38ef0N.exe
- Size
  
  43KB
- MD5
  
  d564bd24a09c652945e5a41429d38ef0
- SHA1
  
  2f5d160ffd925355e6e25f53de6b78b731eeafb6
- SHA256
  
  abda25eddda5467816585904f442a5acb3f162ff93dfe6703842924c40ca1457
- SHA512
  
  66d33ea297a75f4ecf1797e4bbca64aa5f3e1af7358de29cfbcb492e541ce03e93a9db578f5a78d270ec43f15e4e867d37de7993b573c0a396be9b3cbf344b98
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfpW/Jbabj:W7ZppApBULcfpHLcfpr
Score

9^/10

discovery ransomware
- Renames multiple (2804) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware