797e2a5897c7c9bc1212affa4ae9ad21f7a148bb975df4088703771d8bf798a5 | Triage

Sharing

General

Target

797e2a5897c7c9bc1212affa4ae9ad21f7a148bb975df4088703771d8bf798a5N.exe
Size

47KB
Sample

241001-nhkyms1bmh
MD5

abcfa0a0a1a2a2f61382e5d8da2d8af0
SHA1

89c95ee268908683247754e47b154f47e4c1c7bc
SHA256

797e2a5897c7c9bc1212affa4ae9ad21f7a148bb975df4088703771d8bf798a5
SHA512

daf3b4420e151301590df2bc4cd5c7fcb8f7ff471b1aac843c829c2d94ce8f7e768bdfe4040d8bdf2f50ca7d4d679c3b7e131724ba73033b13730c3fe4054ebd
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFjqAJLOqAJLkEJk:W7ZppApBULcfpHLcfpyD6k

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  797e2a5897c7c9bc1212affa4ae9ad21f7a148bb975df4088703771d8bf798a5N.exe
- Size
  
  47KB
- MD5
  
  abcfa0a0a1a2a2f61382e5d8da2d8af0
- SHA1
  
  89c95ee268908683247754e47b154f47e4c1c7bc
- SHA256
  
  797e2a5897c7c9bc1212affa4ae9ad21f7a148bb975df4088703771d8bf798a5
- SHA512
  
  daf3b4420e151301590df2bc4cd5c7fcb8f7ff471b1aac843c829c2d94ce8f7e768bdfe4040d8bdf2f50ca7d4d679c3b7e131724ba73033b13730c3fe4054ebd
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFjqAJLOqAJLkEJk:W7ZppApBULcfpHLcfpyD6k
Score

9^/10

discovery ransomware
- Renames multiple (3831) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware