e38baa76536384af1837df6012304fe8c05cf9374f898f541b4803cbb7d5f99f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e38baa76536384af1837df6012304fe8c05cf9374f898f541b4803cbb7d5f99fN.exe
Size

41KB
Sample

240926-al5wbswcll
MD5

c56e145080690ce90c56bd1ce6de8080
SHA1

a028b38ed569299f1bf2717a7e1a92a70a1bbd2c
SHA256

e38baa76536384af1837df6012304fe8c05cf9374f898f541b4803cbb7d5f99f
SHA512

f84117322f67b53f224931f508ecfb5c100a42cef7bab2a3e1fbe41e285fc1e4f6911283b11b9e9bb318177b36badd776accc88b02ab35cdf1c21317da4b61a5
SSDEEP

768:W7BlphA7pARFbhM0Kkq81LOyq81LOl6Sl5lttXg:W7ZhA7pApM21LOA1LOl6Am

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  e38baa76536384af1837df6012304fe8c05cf9374f898f541b4803cbb7d5f99fN.exe
- Size
  
  41KB
- MD5
  
  c56e145080690ce90c56bd1ce6de8080
- SHA1
  
  a028b38ed569299f1bf2717a7e1a92a70a1bbd2c
- SHA256
  
  e38baa76536384af1837df6012304fe8c05cf9374f898f541b4803cbb7d5f99f
- SHA512
  
  f84117322f67b53f224931f508ecfb5c100a42cef7bab2a3e1fbe41e285fc1e4f6911283b11b9e9bb318177b36badd776accc88b02ab35cdf1c21317da4b61a5
- SSDEEP
  
  768:W7BlphA7pARFbhM0Kkq81LOyq81LOl6Sl5lttXg:W7ZhA7pApM21LOA1LOl6Am
Score

9^/10

discovery ransomware
- Renames multiple (3217) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware