130c28846b5b4e1e479c19ea0023bbea63ae0120a8bb61d4d17672d77fb6f651 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a507868956b56ff0ef244c37708c7d50N.exe
Size

37KB
Sample

240915-jq4y9stalh
MD5

a507868956b56ff0ef244c37708c7d50
SHA1

2fb8f62b7cd96b557c8c3a46e8d36eb53eed0da1
SHA256

130c28846b5b4e1e479c19ea0023bbea63ae0120a8bb61d4d17672d77fb6f651
SHA512

88a5b7f79ded34edea014f9a6f1d746271448605a73cf86aba788a804ccb962e62c47c25e1c700eb851366f192eafacc613bb576c4af7a1801e21a941f7d3bdd
SSDEEP

192:tACUADIY0Br5xjL/nznlAgAQmP1oynLb22vtI0zWXPX3Hz2Hz3HOaO5:GBt7Br5xjL7lAgA71Fbhvt3WX5

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  a507868956b56ff0ef244c37708c7d50N.exe
- Size
  
  37KB
- MD5
  
  a507868956b56ff0ef244c37708c7d50
- SHA1
  
  2fb8f62b7cd96b557c8c3a46e8d36eb53eed0da1
- SHA256
  
  130c28846b5b4e1e479c19ea0023bbea63ae0120a8bb61d4d17672d77fb6f651
- SHA512
  
  88a5b7f79ded34edea014f9a6f1d746271448605a73cf86aba788a804ccb962e62c47c25e1c700eb851366f192eafacc613bb576c4af7a1801e21a941f7d3bdd
- SSDEEP
  
  192:tACUADIY0Br5xjL/nznlAgAQmP1oynLb22vtI0zWXPX3Hz2Hz3HOaO5:GBt7Br5xjL7lAgA71Fbhvt3WX5
Score

9^/10

discovery ransomware
- Renames multiple (3359) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware