16ed6c10348127d373cd7f3e14c1c72d23287ec0d4cd3bee2edfd3df9af4685e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16ed6c10348127d373cd7f3e14c1c72d23287ec0d4cd3bee2edfd3df9af4685e
Size

80KB
Sample

240726-xq926sycpm
MD5

00370ef3a3485df1e0a9489024d1ca51
SHA1

175cc30f352b381918bd1a54c52a714e2dfedcbe
SHA256

16ed6c10348127d373cd7f3e14c1c72d23287ec0d4cd3bee2edfd3df9af4685e
SHA512

4dfe7a8cd6dc3aea7f56c48ac8fc8dda41a83de32b88b255382b3e640108c6f18df09f244b5b259d33230ada3dbf5bc85a727c1d501621f31229261872ac7d92
SSDEEP

1536:W7Z+pApfGQ3y3RWvfmRfm9sKsSd5gYTUykUyN:6+WpDfmRfmhek6

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  16ed6c10348127d373cd7f3e14c1c72d23287ec0d4cd3bee2edfd3df9af4685e
- Size
  
  80KB
- MD5
  
  00370ef3a3485df1e0a9489024d1ca51
- SHA1
  
  175cc30f352b381918bd1a54c52a714e2dfedcbe
- SHA256
  
  16ed6c10348127d373cd7f3e14c1c72d23287ec0d4cd3bee2edfd3df9af4685e
- SHA512
  
  4dfe7a8cd6dc3aea7f56c48ac8fc8dda41a83de32b88b255382b3e640108c6f18df09f244b5b259d33230ada3dbf5bc85a727c1d501621f31229261872ac7d92
- SSDEEP
  
  1536:W7Z+pApfGQ3y3RWvfmRfm9sKsSd5gYTUykUyN:6+WpDfmRfmhek6
Score

9^/10

discovery ransomware
- Renames multiple (3191) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware