ac1fedebb66bb140fd0b127f0ac835fcb9818aaf8b897fbe8a0eed9493cf168a | Triage

Sharing

General

Target

ac1fedebb66bb140fd0b127f0ac835fcb9818aaf8b897fbe8a0eed9493cf168a
Size

94KB
Sample

240813-3a8gas1dlg
MD5

bfff451d0911a3ba67db0545eb1deb73
SHA1

242f040a99d2b0b9c665eb89944f7933dca3819f
SHA256

ac1fedebb66bb140fd0b127f0ac835fcb9818aaf8b897fbe8a0eed9493cf168a
SHA512

5c028f9569632feadddf8ff6a10d807e82a6be446299bb9e0ceb8bbfd0117566c00c745daf98eb38205bf381793a4c79f3cf921fae8042c8b25d0d5b031de763
SSDEEP

1536:W7Z2sspApGg7bobSM+t58qKcAK+j4nI4VfNgZ11PED4gJQeAAUZa0EzOM6:62ssWpGgrM+t58qKcAK+j4n7ByeFUN

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  ac1fedebb66bb140fd0b127f0ac835fcb9818aaf8b897fbe8a0eed9493cf168a
- Size
  
  94KB
- MD5
  
  bfff451d0911a3ba67db0545eb1deb73
- SHA1
  
  242f040a99d2b0b9c665eb89944f7933dca3819f
- SHA256
  
  ac1fedebb66bb140fd0b127f0ac835fcb9818aaf8b897fbe8a0eed9493cf168a
- SHA512
  
  5c028f9569632feadddf8ff6a10d807e82a6be446299bb9e0ceb8bbfd0117566c00c745daf98eb38205bf381793a4c79f3cf921fae8042c8b25d0d5b031de763
- SSDEEP
  
  1536:W7Z2sspApGg7bobSM+t58qKcAK+j4nI4VfNgZ11PED4gJQeAAUZa0EzOM6:62ssWpGgrM+t58qKcAK+j4n7ByeFUN
Score

9^/10

discovery ransomware
- Renames multiple (3460) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware