f96c2f78a0a16561f8efecd83998e8496976584b18c6d8299572e7a77243a469 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f96c2f78a0a16561f8efecd83998e8496976584b18c6d8299572e7a77243a469
Size

37KB
Sample

240803-f1aavsvbjm
MD5

edf1d402e90437214c83932626371bb7
SHA1

3519acc63c888a9a11cd5ea256f3dfe9614b909e
SHA256

f96c2f78a0a16561f8efecd83998e8496976584b18c6d8299572e7a77243a469
SHA512

593a122c5d28459ebfadccb666e30fb5c86c81c0cfe79a9fe66d21d521b4f166b69271e4e520009b9a2c10693d4a9fdc4f5569098310f0816e2fccae368ca61a
SSDEEP

384:yBs7Br5xjL8AgA71Fbhv/FzzwzYlzGAlzGY:/7BlpQpARFbhNIAGoGY

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  f96c2f78a0a16561f8efecd83998e8496976584b18c6d8299572e7a77243a469
- Size
  
  37KB
- MD5
  
  edf1d402e90437214c83932626371bb7
- SHA1
  
  3519acc63c888a9a11cd5ea256f3dfe9614b909e
- SHA256
  
  f96c2f78a0a16561f8efecd83998e8496976584b18c6d8299572e7a77243a469
- SHA512
  
  593a122c5d28459ebfadccb666e30fb5c86c81c0cfe79a9fe66d21d521b4f166b69271e4e520009b9a2c10693d4a9fdc4f5569098310f0816e2fccae368ca61a
- SSDEEP
  
  384:yBs7Br5xjL8AgA71Fbhv/FzzwzYlzGAlzGY:/7BlpQpARFbhNIAGoGY
Score

9^/10

discovery ransomware
- Renames multiple (1170) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware