fba226c21a4898597b2b3f4900c65bdb782aadf2a036488091d97b012ef326b8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fba226c21a4898597b2b3f4900c65bdb782aadf2a036488091d97b012ef326b8
Size

37KB
Sample

240811-e6p3tszamd
MD5

5330a593dff88d0f6a38a054e924fa3a
SHA1

870ffda7138825f6f096c9d3a24b10f8840dfbcb
SHA256

fba226c21a4898597b2b3f4900c65bdb782aadf2a036488091d97b012ef326b8
SHA512

e708017fb432751fa4a6173c5b5460fb3d88b64960acb5c6305d1f4d96bf3830e3f86b9ab77665e274fd13e70bbf6694c007bc305142b1a42e3ca4a3a2fc472f
SSDEEP

768:W7BlphA7pARFbhM0Kkq81LOyq81LOl6Sl5lsS5EBIEBD:W7ZhA7pApM21LOA1LOl6vS5EBIEBD

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  fba226c21a4898597b2b3f4900c65bdb782aadf2a036488091d97b012ef326b8
- Size
  
  37KB
- MD5
  
  5330a593dff88d0f6a38a054e924fa3a
- SHA1
  
  870ffda7138825f6f096c9d3a24b10f8840dfbcb
- SHA256
  
  fba226c21a4898597b2b3f4900c65bdb782aadf2a036488091d97b012ef326b8
- SHA512
  
  e708017fb432751fa4a6173c5b5460fb3d88b64960acb5c6305d1f4d96bf3830e3f86b9ab77665e274fd13e70bbf6694c007bc305142b1a42e3ca4a3a2fc472f
- SSDEEP
  
  768:W7BlphA7pARFbhM0Kkq81LOyq81LOl6Sl5lsS5EBIEBD:W7ZhA7pApM21LOA1LOl6vS5EBIEBD
Score

9^/10

discovery ransomware
- Renames multiple (1112) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware