fae4294fa841dc14ff20a529fb24300397e33ceed76e98610d8b637f4c5579aa | Triage

Sharing

General

Target

fae4294fa841dc14ff20a529fb24300397e33ceed76e98610d8b637f4c5579aa
Size

44KB
Sample

240726-gkpw2stbke
MD5

5cb3628e47e8707d160bde7bb7c3ccc2
SHA1

13b92365cc9d84af14436a6714ffce3c925a8425
SHA256

fae4294fa841dc14ff20a529fb24300397e33ceed76e98610d8b637f4c5579aa
SHA512

c58d6d614fef133590b27b80a2d1413116b6e15fbcf9ae9b9a9e84cd1209a1394490886d3938fce5187f8aaacdaab4a05f90985d4aa632bf5c57457f57ca0be4
SSDEEP

384:yBs7Br5xjL8AgA71Fbhv/FzzwzoRYZMP1z9iw:/7BlpQpARFbhNI8tP1z9iw

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  fae4294fa841dc14ff20a529fb24300397e33ceed76e98610d8b637f4c5579aa
- Size
  
  44KB
- MD5
  
  5cb3628e47e8707d160bde7bb7c3ccc2
- SHA1
  
  13b92365cc9d84af14436a6714ffce3c925a8425
- SHA256
  
  fae4294fa841dc14ff20a529fb24300397e33ceed76e98610d8b637f4c5579aa
- SHA512
  
  c58d6d614fef133590b27b80a2d1413116b6e15fbcf9ae9b9a9e84cd1209a1394490886d3938fce5187f8aaacdaab4a05f90985d4aa632bf5c57457f57ca0be4
- SSDEEP
  
  384:yBs7Br5xjL8AgA71Fbhv/FzzwzoRYZMP1z9iw:/7BlpQpARFbhNI8tP1z9iw
Score

9^/10

discovery ransomware
- Renames multiple (3705) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware