7c9db397b3e07a39ba258e08c439b69842afe41046983cb85791dd51c7c6fc3e | Triage

Sharing

General

Target

a4356f96ceb8b571c8cf80c95d598be0N.exe
Size

48KB
Sample

240806-plcbcashkc
MD5

a4356f96ceb8b571c8cf80c95d598be0
SHA1

f20faf0c895bd8df9b2cdd3234e57701decf7e7a
SHA256

7c9db397b3e07a39ba258e08c439b69842afe41046983cb85791dd51c7c6fc3e
SHA512

f6d369df8f7fd0150bc414d6ee5fee81582dffb0f51b16dc0f4a8e1e30d440c2c37d7ba5861a87a9947906a6d4173a4f9f61474d68c41f891b6eba16e3f3202d
SSDEEP

768:W7BlpppARFbhHFoqAJwBqAJwRJofJoTy6H6p:W7ZppApaJofJoC

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  a4356f96ceb8b571c8cf80c95d598be0N.exe
- Size
  
  48KB
- MD5
  
  a4356f96ceb8b571c8cf80c95d598be0
- SHA1
  
  f20faf0c895bd8df9b2cdd3234e57701decf7e7a
- SHA256
  
  7c9db397b3e07a39ba258e08c439b69842afe41046983cb85791dd51c7c6fc3e
- SHA512
  
  f6d369df8f7fd0150bc414d6ee5fee81582dffb0f51b16dc0f4a8e1e30d440c2c37d7ba5861a87a9947906a6d4173a4f9f61474d68c41f891b6eba16e3f3202d
- SSDEEP
  
  768:W7BlpppARFbhHFoqAJwBqAJwRJofJoTy6H6p:W7ZppApaJofJoC
Score

9^/10

discovery ransomware
- Renames multiple (3428) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware