e5a32f103ff46f43fab55b909126a3944fb11cb19f62fecbdba99568cc98ab2e | Triage

Sharing

General

Target

e5a32f103ff46f43fab55b909126a3944fb11cb19f62fecbdba99568cc98ab2e
Size

46KB
Sample

240919-devnkaxdma
MD5

38d8a2096bc04f77589e9049f40a29c8
SHA1

5a1e6d38e6bba2554358f76b794710d6f4dd1edf
SHA256

e5a32f103ff46f43fab55b909126a3944fb11cb19f62fecbdba99568cc98ab2e
SHA512

e77cbe8c8386b425397ceb41188fd724dffc9182ba2e44bd4f47c5a1deda8e3340225b40b5d0b63015567662d853067cdc2dd303f1c8a3224373aa4b94a4e42d
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFjqAJLOqAJLkEJ7:W7ZppApBULcfpHLcfpyD67

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  e5a32f103ff46f43fab55b909126a3944fb11cb19f62fecbdba99568cc98ab2e
- Size
  
  46KB
- MD5
  
  38d8a2096bc04f77589e9049f40a29c8
- SHA1
  
  5a1e6d38e6bba2554358f76b794710d6f4dd1edf
- SHA256
  
  e5a32f103ff46f43fab55b909126a3944fb11cb19f62fecbdba99568cc98ab2e
- SHA512
  
  e77cbe8c8386b425397ceb41188fd724dffc9182ba2e44bd4f47c5a1deda8e3340225b40b5d0b63015567662d853067cdc2dd303f1c8a3224373aa4b94a4e42d
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFjqAJLOqAJLkEJ7:W7ZppApBULcfpHLcfpyD67
Score

9^/10

discovery ransomware
- Renames multiple (1030) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware