809880aa6edd40be77a8ae611909ccff2863b87150a4cdaecc090b8d458151f4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

809880aa6edd40be77a8ae611909ccff2863b87150a4cdaecc090b8d458151f4N.exe
Size

41KB
Sample

240925-wzn1matbqb
MD5

016db14147446d1af9af987b91a47aa0
SHA1

528fed616d381c4d5ebe3168a384501d1932a14b
SHA256

809880aa6edd40be77a8ae611909ccff2863b87150a4cdaecc090b8d458151f4
SHA512

ec0be84865eb1cddf3e97665f822cbd6dfb3f7a9a3b0f3893090e4c3a4f4a9ee00d5539c547bfcc50091a1801a9d9e1a8d9c23224ce07cb40c845c1ba7cfa092
SSDEEP

384:GBt7Br5xjL7lAgA71Fbhvt3avjZjTc7QUlac7QUl92ns:W7Blp9pARFbhSjs2ns

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  809880aa6edd40be77a8ae611909ccff2863b87150a4cdaecc090b8d458151f4N.exe
- Size
  
  41KB
- MD5
  
  016db14147446d1af9af987b91a47aa0
- SHA1
  
  528fed616d381c4d5ebe3168a384501d1932a14b
- SHA256
  
  809880aa6edd40be77a8ae611909ccff2863b87150a4cdaecc090b8d458151f4
- SHA512
  
  ec0be84865eb1cddf3e97665f822cbd6dfb3f7a9a3b0f3893090e4c3a4f4a9ee00d5539c547bfcc50091a1801a9d9e1a8d9c23224ce07cb40c845c1ba7cfa092
- SSDEEP
  
  384:GBt7Br5xjL7lAgA71Fbhvt3avjZjTc7QUlac7QUl92ns:W7Blp9pARFbhSjs2ns
Score

9^/10

discovery ransomware
- Renames multiple (3149) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware