14a3e16b3811e9092ba539de878fa6a7c3a941658cd41d3eeba15980e95bd7b8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f6e38c7226942191066d94d1d352790N.exe
Size

37KB
Sample

240803-fcqypsybrd
MD5

4f6e38c7226942191066d94d1d352790
SHA1

e921271d1d8c0c2bb732b8a0f7f828cc66c0e5fe
SHA256

14a3e16b3811e9092ba539de878fa6a7c3a941658cd41d3eeba15980e95bd7b8
SHA512

1ef76318d7ef0a8f2f22b3637edbf2db3cfdbcd47ad7cb96f14a51161cf50b7da49747404076abe9abca2b6ccbe9cb2802a333d96ef6dd3ca5c399f858092b29
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42Lcfpb2N231F1G:W7ZppApBULcfpHLcfpSo3fo

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  4f6e38c7226942191066d94d1d352790N.exe
- Size
  
  37KB
- MD5
  
  4f6e38c7226942191066d94d1d352790
- SHA1
  
  e921271d1d8c0c2bb732b8a0f7f828cc66c0e5fe
- SHA256
  
  14a3e16b3811e9092ba539de878fa6a7c3a941658cd41d3eeba15980e95bd7b8
- SHA512
  
  1ef76318d7ef0a8f2f22b3637edbf2db3cfdbcd47ad7cb96f14a51161cf50b7da49747404076abe9abca2b6ccbe9cb2802a333d96ef6dd3ca5c399f858092b29
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42Lcfpb2N231F1G:W7ZppApBULcfpHLcfpSo3fo
Score

9^/10

discovery ransomware
- Renames multiple (3329) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware