5cbb6442c47708558da29588e0d8ef0b34c4716be4a47e7c715ea844fbcf60d7 | Triage

Resubmissions

16/03/2025, 00:42 UTC

250316-a2mdxs1jv4 1

16/03/2025, 00:35 UTC

250316-axnq7azrv5 10

16/03/2025, 00:32 UTC

250316-avvfyszrs2 6

Sharing

General

Target

NoMoreRansom.zip
Size

916KB
Sample

250316-avvfyszrs2
MD5

f315e49d46914e3989a160bbcfc5de85
SHA1

99654bfeaad090d95deef3a2e9d5d021d2dc5f63
SHA256

5cbb6442c47708558da29588e0d8ef0b34c4716be4a47e7c715ea844fbcf60d7
SHA512

224747b15d0713afcb2641f8f3aa1687516d42e045d456b3ed096a42757a6c10c6626672366c9b632349cf6ffe41011724e6f4b684837de9b719d0f351dfd22e
SSDEEP

24576:+FhIdZxByAl+XiqNk6n3DaeCTLD1yilc7KrBVw1lFVFDqE/zQRsAOfySS:AhAgo2ikhryLD1hcerklFVhqEMiAuySS

Score

6^/10

Malware Config

Targets

- Target
  
  NoMoreRansom.zip
- Size
  
  916KB
- MD5
  
  f315e49d46914e3989a160bbcfc5de85
- SHA1
  
  99654bfeaad090d95deef3a2e9d5d021d2dc5f63
- SHA256
  
  5cbb6442c47708558da29588e0d8ef0b34c4716be4a47e7c715ea844fbcf60d7
- SHA512
  
  224747b15d0713afcb2641f8f3aa1687516d42e045d456b3ed096a42757a6c10c6626672366c9b632349cf6ffe41011724e6f4b684837de9b719d0f351dfd22e
- SSDEEP
  
  24576:+FhIdZxByAl+XiqNk6n3DaeCTLD1yilc7KrBVw1lFVFDqE/zQRsAOfySS:AhAgo2ikhryLD1hcerklFVhqEMiAuySS
Score

6^/10
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2 behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4