7b67da1243ac4a19606455bc49147c64fc2c5955a0b4c10853eb5848f9071b1e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79382659c18f04135af689aa97c55870N.exe
Size

145KB
Sample

240906-xdrp3aserg
MD5

79382659c18f04135af689aa97c55870
SHA1

6cbc6b6eef8fcb0e9b6c76e77b48f1f9751a1699
SHA256

7b67da1243ac4a19606455bc49147c64fc2c5955a0b4c10853eb5848f9071b1e
SHA512

8588b8ae0ed1dc9051a359ad7a9755011347faa3a65ff078cbff74312f7998cd831213c3e8b77ef410884399c978ae7461c2ae2b56762770efff5d3390412a52
SSDEEP

3072:6e7WpMaxeb0CYJ97lEYNR73e+eKZOf7f/e7WpMaxeb0CY5:RqKvb0CYJ973e+eKZOf7fWqKvb0CY5

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  79382659c18f04135af689aa97c55870N.exe
- Size
  
  145KB
- MD5
  
  79382659c18f04135af689aa97c55870
- SHA1
  
  6cbc6b6eef8fcb0e9b6c76e77b48f1f9751a1699
- SHA256
  
  7b67da1243ac4a19606455bc49147c64fc2c5955a0b4c10853eb5848f9071b1e
- SHA512
  
  8588b8ae0ed1dc9051a359ad7a9755011347faa3a65ff078cbff74312f7998cd831213c3e8b77ef410884399c978ae7461c2ae2b56762770efff5d3390412a52
- SSDEEP
  
  3072:6e7WpMaxeb0CYJ97lEYNR73e+eKZOf7f/e7WpMaxeb0CY5:RqKvb0CYJ973e+eKZOf7fWqKvb0CY5
Score

9^/10

discovery ransomware
- Renames multiple (2790) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware