General

  • Target

    6b828250937eb11155c08f918099af40N.exe

  • Size

    70KB

  • Sample

    240806-gyl3ba1frj

  • MD5

    6b828250937eb11155c08f918099af40

  • SHA1

    7e6260ae8e27ad0649f4f790ebc5a8a4d4692570

  • SHA256

    7d3794279abacd1a6eef8249b73b87c7e60331636a9355cd8b1beefd0ed55753

  • SHA512

    309dcb94536e5d7bdc20335d42694ee328ba6d6d3cc3c668f89677df11fe43e0ea7571efa3dbcec38f2a183c1589ee3f20aa60428e50b1e8850e85dfab81fe11

  • SSDEEP

    1536:W7ZDpApYbVK4vx4PN54PN4OHepOHeOPEuB:6DWp7WD

Score
9/10

Malware Config

Targets

    • Target

      6b828250937eb11155c08f918099af40N.exe

    • Size

      70KB

    • MD5

      6b828250937eb11155c08f918099af40

    • SHA1

      7e6260ae8e27ad0649f4f790ebc5a8a4d4692570

    • SHA256

      7d3794279abacd1a6eef8249b73b87c7e60331636a9355cd8b1beefd0ed55753

    • SHA512

      309dcb94536e5d7bdc20335d42694ee328ba6d6d3cc3c668f89677df11fe43e0ea7571efa3dbcec38f2a183c1589ee3f20aa60428e50b1e8850e85dfab81fe11

    • SSDEEP

      1536:W7ZDpApYbVK4vx4PN54PN4OHepOHeOPEuB:6DWp7WD

    Score
    9/10
    • Renames multiple (3156) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

MITRE ATT&CK Enterprise v15

Tasks