b3bbb67693fb3ad2f95c02f30f3d73a9f472ad25ba71c3a306af3fd79964bfc1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f8ff2d51420110ca5b7bf5e6160847c0N.exe
Size

38KB
Sample

240813-vge5bszflj
MD5

f8ff2d51420110ca5b7bf5e6160847c0
SHA1

cd7b0580283ccb452b0e894b768a1d8221cc6f32
SHA256

b3bbb67693fb3ad2f95c02f30f3d73a9f472ad25ba71c3a306af3fd79964bfc1
SHA512

60f7bec50bb90d837ff750369dfa980d254bdf81435f8393671aa449cfe224e27b89ce4d3ea737d5d73825903262ef11936c7fd32238f50f7c3f8cd07abdb91a
SSDEEP

192:tACUADIY0Br5xjL/nassAgAQmP1oynLb22vyBX5HAug4j4fPUDN5HAug4j4fPUDF:GBt7Br5xjLvassAgA71FbhvYD/DMK

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  f8ff2d51420110ca5b7bf5e6160847c0N.exe
- Size
  
  38KB
- MD5
  
  f8ff2d51420110ca5b7bf5e6160847c0
- SHA1
  
  cd7b0580283ccb452b0e894b768a1d8221cc6f32
- SHA256
  
  b3bbb67693fb3ad2f95c02f30f3d73a9f472ad25ba71c3a306af3fd79964bfc1
- SHA512
  
  60f7bec50bb90d837ff750369dfa980d254bdf81435f8393671aa449cfe224e27b89ce4d3ea737d5d73825903262ef11936c7fd32238f50f7c3f8cd07abdb91a
- SSDEEP
  
  192:tACUADIY0Br5xjL/nassAgAQmP1oynLb22vyBX5HAug4j4fPUDN5HAug4j4fPUDF:GBt7Br5xjLvassAgA71FbhvYD/DMK
Score

9^/10

discovery ransomware
- Renames multiple (3275) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware