1c20cbfd09cfde29d7a28f1f67957be0c1dd37aed1f4f0db014762c6af0422b1 | Triage

Sharing

General

Target

06d06ad7598dd5168e91c3221623b1f0N.exe
Size

96KB
Sample

240813-v56l7a1hqq
MD5

06d06ad7598dd5168e91c3221623b1f0
SHA1

669b39092e9ff6099f07e88501ae47018bacb72a
SHA256

1c20cbfd09cfde29d7a28f1f67957be0c1dd37aed1f4f0db014762c6af0422b1
SHA512

66a135af6230e6afdedcd6815ffba69327d48e53781603707db0999bf784d4f0ca4ddc034540f874ba6c9e899ee90df544a82b3f7f3e6653e372122565ec653a
SSDEEP

3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFslEhLfyBe:PqFF2Ie+efsLK

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  06d06ad7598dd5168e91c3221623b1f0N.exe
- Size
  
  96KB
- MD5
  
  06d06ad7598dd5168e91c3221623b1f0
- SHA1
  
  669b39092e9ff6099f07e88501ae47018bacb72a
- SHA256
  
  1c20cbfd09cfde29d7a28f1f67957be0c1dd37aed1f4f0db014762c6af0422b1
- SHA512
  
  66a135af6230e6afdedcd6815ffba69327d48e53781603707db0999bf784d4f0ca4ddc034540f874ba6c9e899ee90df544a82b3f7f3e6653e372122565ec653a
- SSDEEP
  
  3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFslEhLfyBe:PqFF2Ie+efsLK
Score

9^/10

discovery ransomware
- Renames multiple (3141) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware