f16fc4ce75c3ddd7a98b88cb719fa2621c89bd0ea31b5cffb2546c7625313eb5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f16fc4ce75c3ddd7a98b88cb719fa2621c89bd0ea31b5cffb2546c7625313eb5
Size

98KB
Sample

240811-em8e3aybpa
MD5

c49acb867280dcd10f61707c24400e56
SHA1

ce0a26038e7232e6e9780ce0f83ec1d1c905530e
SHA256

f16fc4ce75c3ddd7a98b88cb719fa2621c89bd0ea31b5cffb2546c7625313eb5
SHA512

e4a55ddedfa5239de035101e2e5d28b94fcd34e88bfbc67c6e0e93ab433b490f4ac379f63aea9214e0ca3f67a25508da6c0592f5d0735458a56f2b5043c82424
SSDEEP

3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFslEhLfyB1:PqFF2Ie+efsLZOC

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  f16fc4ce75c3ddd7a98b88cb719fa2621c89bd0ea31b5cffb2546c7625313eb5
- Size
  
  98KB
- MD5
  
  c49acb867280dcd10f61707c24400e56
- SHA1
  
  ce0a26038e7232e6e9780ce0f83ec1d1c905530e
- SHA256
  
  f16fc4ce75c3ddd7a98b88cb719fa2621c89bd0ea31b5cffb2546c7625313eb5
- SHA512
  
  e4a55ddedfa5239de035101e2e5d28b94fcd34e88bfbc67c6e0e93ab433b490f4ac379f63aea9214e0ca3f67a25508da6c0592f5d0735458a56f2b5043c82424
- SSDEEP
  
  3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFslEhLfyB1:PqFF2Ie+efsLZOC
Score

9^/10

discovery ransomware
- Renames multiple (3509) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware