be5456a7b58e293c197bd4f0765f02d03f51f1706d9ab8b0a400c2be60229a96 | Triage

Sharing

General

Target

be5456a7b58e293c197bd4f0765f02d03f51f1706d9ab8b0a400c2be60229a96N.exe
Size

52KB
Sample

240925-g99mrataqe
MD5

3b1fab5a8a11bcb2e83477110d069380
SHA1

776ee1b4b5516669a7c620e9430af44a14be0489
SHA256

be5456a7b58e293c197bd4f0765f02d03f51f1706d9ab8b0a400c2be60229a96
SHA512

d595a841fd7f9b8d09326adc06b8bdfda33c5a466c3b17100e1583df592cf32f3654580e4a2450e55ac5519f3fc5d737fa3a94e56efef928ad77080ccf371735
SSDEEP

768:W7BlphA7pARFbhM0Kkq81LOyq81LOl6Sl5lz/g6sHzcXHzcC3OTHTQZ0Zo:W7ZhA7pApM21LOA1LOl6l6YzqzV3h

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  be5456a7b58e293c197bd4f0765f02d03f51f1706d9ab8b0a400c2be60229a96N.exe
- Size
  
  52KB
- MD5
  
  3b1fab5a8a11bcb2e83477110d069380
- SHA1
  
  776ee1b4b5516669a7c620e9430af44a14be0489
- SHA256
  
  be5456a7b58e293c197bd4f0765f02d03f51f1706d9ab8b0a400c2be60229a96
- SHA512
  
  d595a841fd7f9b8d09326adc06b8bdfda33c5a466c3b17100e1583df592cf32f3654580e4a2450e55ac5519f3fc5d737fa3a94e56efef928ad77080ccf371735
- SSDEEP
  
  768:W7BlphA7pARFbhM0Kkq81LOyq81LOl6Sl5lz/g6sHzcXHzcC3OTHTQZ0Zo:W7ZhA7pApM21LOA1LOl6l6YzqzV3h
Score

9^/10

discovery ransomware
- Renames multiple (3218) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware