72a336b73bcfda674b5042934c8089dff317b48c634ce189682f25173a7e20e1 | Triage

Sharing

General

Target

72a336b73bcfda674b5042934c8089dff317b48c634ce189682f25173a7e20e1N.exe
Size

41KB
Sample

240925-f2csdaxcrn
MD5

a0ec82dbf2ba424c5bdd22e365d07390
SHA1

f302bc18a5c5f9d3c9b58043cd7d102ae98325b8
SHA256

72a336b73bcfda674b5042934c8089dff317b48c634ce189682f25173a7e20e1
SHA512

2fb73afe2d39bc86521c6fb828ccfa933828937bed0cb9b7914e0a87aca25c613b0766c10ce5a06c8fcd3c17dc8f35093effdc69d0f46d3b48766fabce71f0e7
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFjqAJLOqAJLA:W7ZppApBULcfpHLcfpyDr

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  72a336b73bcfda674b5042934c8089dff317b48c634ce189682f25173a7e20e1N.exe
- Size
  
  41KB
- MD5
  
  a0ec82dbf2ba424c5bdd22e365d07390
- SHA1
  
  f302bc18a5c5f9d3c9b58043cd7d102ae98325b8
- SHA256
  
  72a336b73bcfda674b5042934c8089dff317b48c634ce189682f25173a7e20e1
- SHA512
  
  2fb73afe2d39bc86521c6fb828ccfa933828937bed0cb9b7914e0a87aca25c613b0766c10ce5a06c8fcd3c17dc8f35093effdc69d0f46d3b48766fabce71f0e7
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFjqAJLOqAJLA:W7ZppApBULcfpHLcfpyDr
Score

9^/10

discovery ransomware
- Renames multiple (3341) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware