b3df799ce9ea3816db64ae2eb37d47ed15be841b0ac23d8331d1cd3d11f14a36 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23a5a98a711029bd11c99dcc8c308870N.exe
Size

94KB
Sample

240907-gqfkkaybjl
MD5

23a5a98a711029bd11c99dcc8c308870
SHA1

09c72bcdb32ada2b8a8169a99c6acc85cbad9810
SHA256

b3df799ce9ea3816db64ae2eb37d47ed15be841b0ac23d8331d1cd3d11f14a36
SHA512

6942486a24b674ee846f5104a76df885b6555bcff97f96f4f9a90207cf4f27e32f9bc331caaf4b015d865fef458a3021575998afaa7ceb182b6068fa8d2e4a63
SSDEEP

1536:W7ZppApUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFsAcEh+:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsn

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  23a5a98a711029bd11c99dcc8c308870N.exe
- Size
  
  94KB
- MD5
  
  23a5a98a711029bd11c99dcc8c308870
- SHA1
  
  09c72bcdb32ada2b8a8169a99c6acc85cbad9810
- SHA256
  
  b3df799ce9ea3816db64ae2eb37d47ed15be841b0ac23d8331d1cd3d11f14a36
- SHA512
  
  6942486a24b674ee846f5104a76df885b6555bcff97f96f4f9a90207cf4f27e32f9bc331caaf4b015d865fef458a3021575998afaa7ceb182b6068fa8d2e4a63
- SSDEEP
  
  1536:W7ZppApUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFsAcEh+:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsn
Score

9^/10

discovery ransomware
- Renames multiple (2954) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware