5f9fb30684852ec6df9b97d368c5cd1e5149103bbe038712e6c10e8ad0531376 | Triage

Sharing

General

Target

6a1b90edd27e7d6ad51e4f3fda5bcf60N.exe
Size

47KB
Sample

240806-gtc9lsvgra
MD5

6a1b90edd27e7d6ad51e4f3fda5bcf60
SHA1

d84682c839582ea9dfc0027c918d7cd5bfe399f9
SHA256

5f9fb30684852ec6df9b97d368c5cd1e5149103bbe038712e6c10e8ad0531376
SHA512

d097ebc5cbed8fa89c42f8a0f9fa7b3145815c15a241b98d85a352fc6fdc8708029a04be72007c590b56ef89c84bc23c2f9280a59f8c62593d01f32f143856c5
SSDEEP

768:W7BlpppARFbhHFoqAJwBqAJwRJofJoT37W:W7ZppApaJofJo77W

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  6a1b90edd27e7d6ad51e4f3fda5bcf60N.exe
- Size
  
  47KB
- MD5
  
  6a1b90edd27e7d6ad51e4f3fda5bcf60
- SHA1
  
  d84682c839582ea9dfc0027c918d7cd5bfe399f9
- SHA256
  
  5f9fb30684852ec6df9b97d368c5cd1e5149103bbe038712e6c10e8ad0531376
- SHA512
  
  d097ebc5cbed8fa89c42f8a0f9fa7b3145815c15a241b98d85a352fc6fdc8708029a04be72007c590b56ef89c84bc23c2f9280a59f8c62593d01f32f143856c5
- SSDEEP
  
  768:W7BlpppARFbhHFoqAJwBqAJwRJofJoT37W:W7ZppApaJofJo77W
Score

9^/10

discovery ransomware
- Renames multiple (408) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware