8464a63312843e91a530c70d65297b1a244c25479b4e72a299c6c10d4e7dad90 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f8b992d51b063286a1f4299e633d5e0N.exe
Size

57KB
Sample

240806-fhpmtstgpf
MD5

5f8b992d51b063286a1f4299e633d5e0
SHA1

8886a70b3de102d54361cbd1153b003157f0cffb
SHA256

8464a63312843e91a530c70d65297b1a244c25479b4e72a299c6c10d4e7dad90
SHA512

9dfbfe340ef48c9eb07c7c3f5806bbd51c6df44b838a46ed31a4057716adf023a7ed80fdce298f1705cfbfb731a7da3869ab57955b07af78765341620b53b542
SSDEEP

1536:W7ZrpApojswv0EhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFsx:6rWpcsHEhLfyBtPf50FWkFpPDze/qFs/

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  5f8b992d51b063286a1f4299e633d5e0N.exe
- Size
  
  57KB
- MD5
  
  5f8b992d51b063286a1f4299e633d5e0
- SHA1
  
  8886a70b3de102d54361cbd1153b003157f0cffb
- SHA256
  
  8464a63312843e91a530c70d65297b1a244c25479b4e72a299c6c10d4e7dad90
- SHA512
  
  9dfbfe340ef48c9eb07c7c3f5806bbd51c6df44b838a46ed31a4057716adf023a7ed80fdce298f1705cfbfb731a7da3869ab57955b07af78765341620b53b542
- SSDEEP
  
  1536:W7ZrpApojswv0EhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFsx:6rWpcsHEhLfyBtPf50FWkFpPDze/qFs/
Score

9^/10

discovery ransomware
- Renames multiple (329) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware