fdef0947e8d39d15d732782e6cba6a6283141fac595f66fb5f35e6c983cefedb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdef0947e8d39d15d732782e6cba6a6283141fac595f66fb5f35e6c983cefedb
Size

46KB
Sample

240724-fzcdtszdlp
MD5

173a0e66db9d6ca13f6d3bc5d93b0493
SHA1

27f6d4bc3db6d781b36cfa7cd07658360fe94239
SHA256

fdef0947e8d39d15d732782e6cba6a6283141fac595f66fb5f35e6c983cefedb
SHA512

791ac078bf5f2c5d07dfcdfb0e44019c63dbe9f91dd259593fe40a61b302bb931e9cfbb9eec8caac6b18da34ae6cb51954052261e5bb9098b7259b840f8ba23d
SSDEEP

768:/7BlpQpARFbhn54fmiy+3BVr54fmiy+3BV//Mtj:/7ZQpApmictj

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  fdef0947e8d39d15d732782e6cba6a6283141fac595f66fb5f35e6c983cefedb
- Size
  
  46KB
- MD5
  
  173a0e66db9d6ca13f6d3bc5d93b0493
- SHA1
  
  27f6d4bc3db6d781b36cfa7cd07658360fe94239
- SHA256
  
  fdef0947e8d39d15d732782e6cba6a6283141fac595f66fb5f35e6c983cefedb
- SHA512
  
  791ac078bf5f2c5d07dfcdfb0e44019c63dbe9f91dd259593fe40a61b302bb931e9cfbb9eec8caac6b18da34ae6cb51954052261e5bb9098b7259b840f8ba23d
- SSDEEP
  
  768:/7BlpQpARFbhn54fmiy+3BVr54fmiy+3BV//Mtj:/7ZQpApmictj
Score

9^/10

discovery ransomware
- Renames multiple (600) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware