570ffc981af6beb3e8d260f9eab06e4fda8d762d724ecc5c753b6c17edce234e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d5c457224862c1767a2099b75ef7ab0N.exe
Size

61KB
Sample

240813-3zx2vssalg
MD5

6d5c457224862c1767a2099b75ef7ab0
SHA1

d3c778f730a8907990c79059c21bc68777cbe063
SHA256

570ffc981af6beb3e8d260f9eab06e4fda8d762d724ecc5c753b6c17edce234e
SHA512

359d0cdc106dc5edfdf8db07afcec8086841c8785afa8ba96f259f2cad2d33ed0da9ef2468e0517e7beed574ee79e810da55feb84c25098afd2c2e3805bf60fc
SSDEEP

1536:W7ZppApBULcfpHLcfpX2/Nw/Nwmxd166c:6pWpBwchcV2WxM

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  6d5c457224862c1767a2099b75ef7ab0N.exe
- Size
  
  61KB
- MD5
  
  6d5c457224862c1767a2099b75ef7ab0
- SHA1
  
  d3c778f730a8907990c79059c21bc68777cbe063
- SHA256
  
  570ffc981af6beb3e8d260f9eab06e4fda8d762d724ecc5c753b6c17edce234e
- SHA512
  
  359d0cdc106dc5edfdf8db07afcec8086841c8785afa8ba96f259f2cad2d33ed0da9ef2468e0517e7beed574ee79e810da55feb84c25098afd2c2e3805bf60fc
- SSDEEP
  
  1536:W7ZppApBULcfpHLcfpX2/Nw/Nwmxd166c:6pWpBwchcV2WxM
Score

9^/10

discovery ransomware
- Renames multiple (3270) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware