fbca770708526d7bb605b1d5e4ef6b1d4529e528e1dab788942d9fc8c38343f2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59cc7a1f4f9bb6e150b619a9b9c9dcf0N.exe
Size

84KB
Sample

240807-d5fbkazekk
MD5

59cc7a1f4f9bb6e150b619a9b9c9dcf0
SHA1

3e27cd0308df028235fec7b007b61ac22aeb1abc
SHA256

fbca770708526d7bb605b1d5e4ef6b1d4529e528e1dab788942d9fc8c38343f2
SHA512

2776610df2a239803b62549d488c1742b18e9261de8483f0f4cb52d4eb33a68a4577403e7729ecb412172ee8828952fe5515278db0058fe6e87f32a4d669ad67
SSDEEP

1536:W7ZhA7pApvOsOKjC0YSilpFpfkJOMETC+cI2I7pqpZ:6e7WpXYvnh3O

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  59cc7a1f4f9bb6e150b619a9b9c9dcf0N.exe
- Size
  
  84KB
- MD5
  
  59cc7a1f4f9bb6e150b619a9b9c9dcf0
- SHA1
  
  3e27cd0308df028235fec7b007b61ac22aeb1abc
- SHA256
  
  fbca770708526d7bb605b1d5e4ef6b1d4529e528e1dab788942d9fc8c38343f2
- SHA512
  
  2776610df2a239803b62549d488c1742b18e9261de8483f0f4cb52d4eb33a68a4577403e7729ecb412172ee8828952fe5515278db0058fe6e87f32a4d669ad67
- SSDEEP
  
  1536:W7ZhA7pApvOsOKjC0YSilpFpfkJOMETC+cI2I7pqpZ:6e7WpXYvnh3O
Score

9^/10

discovery ransomware
- Renames multiple (3111) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware