d65c497afe4a673292c8a5497b32368e96b2ddac06f7ee748107e991e2422fae | Triage

Sharing

General

Target

d65c497afe4a673292c8a5497b32368e96b2ddac06f7ee748107e991e2422fae.exe
Size

91KB
Sample

240908-e51syawgrn
MD5

e6b71023deba5610474083c104e25121
SHA1

10d561bd955b2d5e29eaacdf5d1891217bb6cff3
SHA256

d65c497afe4a673292c8a5497b32368e96b2ddac06f7ee748107e991e2422fae
SHA512

469e0dff48471d77ef969bb24ed461d176cd413a1bfa6b1c6f8abad9038a0694a7f5a676aff6c83f723da658c2a4062ea2b238d447fa92a91c5b68d5d97d76bb
SSDEEP

1536:W7Z9pApQESOHepOHe8G+6E65dyGdykNdNBKgg+EvBnHHwTVEvBnHHwTEwQ:69WpQE0zxg+TOwQ

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  d65c497afe4a673292c8a5497b32368e96b2ddac06f7ee748107e991e2422fae.exe
- Size
  
  91KB
- MD5
  
  e6b71023deba5610474083c104e25121
- SHA1
  
  10d561bd955b2d5e29eaacdf5d1891217bb6cff3
- SHA256
  
  d65c497afe4a673292c8a5497b32368e96b2ddac06f7ee748107e991e2422fae
- SHA512
  
  469e0dff48471d77ef969bb24ed461d176cd413a1bfa6b1c6f8abad9038a0694a7f5a676aff6c83f723da658c2a4062ea2b238d447fa92a91c5b68d5d97d76bb
- SSDEEP
  
  1536:W7Z9pApQESOHepOHe8G+6E65dyGdykNdNBKgg+EvBnHHwTVEvBnHHwTEwQ:69WpQE0zxg+TOwQ
Score

9^/10

discovery ransomware
- Renames multiple (3448) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware