1a1bc10f082fe8093292c6ecd7c32f67388181d02ea1fc9dccd00412a0af212d | Triage

Sharing

General

Target

1fa6e54ac1c8af70d45ec5839ff6f7a0N.exe
Size

98KB
Sample

240803-aar54awcml
MD5

1fa6e54ac1c8af70d45ec5839ff6f7a0
SHA1

7feb0bfd0345f5b0500cb919745bff1ab52f7a64
SHA256

1a1bc10f082fe8093292c6ecd7c32f67388181d02ea1fc9dccd00412a0af212d
SHA512

b868ecf3775c141834db8d9ac4c106580b3f2cc5d4bdceef6e58a19239a462122d2c5fc39441ae98d2998cbec761db046cbbb9ef9a9a820dadc0c86223c2bbd2
SSDEEP

1536:W7ZDpApYbWjIlE77ufL2e+efZwZQ/8S/8z3MLQ:6DWpwE7oL2e+efZwZ08i8z3MLQ

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  1fa6e54ac1c8af70d45ec5839ff6f7a0N.exe
- Size
  
  98KB
- MD5
  
  1fa6e54ac1c8af70d45ec5839ff6f7a0
- SHA1
  
  7feb0bfd0345f5b0500cb919745bff1ab52f7a64
- SHA256
  
  1a1bc10f082fe8093292c6ecd7c32f67388181d02ea1fc9dccd00412a0af212d
- SHA512
  
  b868ecf3775c141834db8d9ac4c106580b3f2cc5d4bdceef6e58a19239a462122d2c5fc39441ae98d2998cbec761db046cbbb9ef9a9a820dadc0c86223c2bbd2
- SSDEEP
  
  1536:W7ZDpApYbWjIlE77ufL2e+efZwZQ/8S/8z3MLQ:6DWpwE7oL2e+efZwZ08i8z3MLQ
Score

9^/10

discovery ransomware
- Renames multiple (2896) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware