9638c8ffdecd58cb1cdba1889922821b5774e93d4ad187267651526dc51effbd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a0f16fdabac998160206031bafbf950N.exe
Size

70KB
Sample

240726-3ffy8s1gkm
MD5

6a0f16fdabac998160206031bafbf950
SHA1

b9abecb5c5e94b71101418fd6b7aab45c5cfa608
SHA256

9638c8ffdecd58cb1cdba1889922821b5774e93d4ad187267651526dc51effbd
SHA512

bd20bb9a22fe7c63139e620b27c837e1460a4c4bd5175c204c4c8516623dc639334b343f52f8c5cf3d05f1d21f0904ca9ad0eae3e89c8f2322870004ddeb8982
SSDEEP

1536:p7ZhA7dAp1++PJHJXA/OsIZfzc3/Q8Ue+bs:Te76WQSotbs

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  6a0f16fdabac998160206031bafbf950N.exe
- Size
  
  70KB
- MD5
  
  6a0f16fdabac998160206031bafbf950
- SHA1
  
  b9abecb5c5e94b71101418fd6b7aab45c5cfa608
- SHA256
  
  9638c8ffdecd58cb1cdba1889922821b5774e93d4ad187267651526dc51effbd
- SHA512
  
  bd20bb9a22fe7c63139e620b27c837e1460a4c4bd5175c204c4c8516623dc639334b343f52f8c5cf3d05f1d21f0904ca9ad0eae3e89c8f2322870004ddeb8982
- SSDEEP
  
  1536:p7ZhA7dAp1++PJHJXA/OsIZfzc3/Q8Ue+bs:Te76WQSotbs
Score

9^/10

discovery ransomware
- Renames multiple (2697) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware