ba778a0acc28b31e48aee6f850a549a5dab1d857ef9a2a164a76601558f70763 | Triage

Sharing

General

Target

ba778a0acc28b31e48aee6f850a549a5dab1d857ef9a2a164a76601558f70763N.exe
Size

300KB
Sample

241120-d8sfaszdjg
MD5

5b0f2536c8eaaad7ba004880353aae90
SHA1

01a03c39d3dc8399a311d1d4c390107b4fc16387
SHA256

ba778a0acc28b31e48aee6f850a549a5dab1d857ef9a2a164a76601558f70763
SHA512

882323762c2f6032e7edbf5eb8642584deeef0d24fb4004b087ec7dd6122752eef16178d36468f68555fc0c2786775aabde3f6897edc8364a8dd68330c1994f7
SSDEEP

3072:FgV7qqpZXXRvjxCb5NgXDY7uSlkJcUa7kYQTcqW2NdQQGH/UDhSCUc4aqTBK91g0:u1rlKgzelZNQSBQGH/CSpWqTTmQ

Score

6^/10

discovery ransomware

Malware Config

Targets

- Target
  
  ba778a0acc28b31e48aee6f850a549a5dab1d857ef9a2a164a76601558f70763N.exe
- Size
  
  300KB
- MD5
  
  5b0f2536c8eaaad7ba004880353aae90
- SHA1
  
  01a03c39d3dc8399a311d1d4c390107b4fc16387
- SHA256
  
  ba778a0acc28b31e48aee6f850a549a5dab1d857ef9a2a164a76601558f70763
- SHA512
  
  882323762c2f6032e7edbf5eb8642584deeef0d24fb4004b087ec7dd6122752eef16178d36468f68555fc0c2786775aabde3f6897edc8364a8dd68330c1994f7
- SSDEEP
  
  3072:FgV7qqpZXXRvjxCb5NgXDY7uSlkJcUa7kYQTcqW2NdQQGH/UDhSCUc4aqTBK91g0:u1rlKgzelZNQSBQGH/CSpWqTTmQ
Score

6^/10

discovery ransomware
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Sets desktop wallpaper using registry
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware