f657b995a02837a6ef314902fe88d0f5612b2b6b0fe5a3b4d86e00daa03a2d88 | Triage

Sharing

General

Target

f657b995a02837a6ef314902fe88d0f5612b2b6b0fe5a3b4d86e00daa03a2d88
Size

63KB
Sample

240814-b7dveavaje
MD5

83d4a7f9fdbddf45f24a5bce14db5367
SHA1

207e456e43f55f1588ba9d5f1f8ede85fce739b8
SHA256

f657b995a02837a6ef314902fe88d0f5612b2b6b0fe5a3b4d86e00daa03a2d88
SHA512

563a0227759fb9df6e6853030f52d84b7818e540599d1390f10a5cdd16e34e841c2050eccfcd33f92e26f5efcd603f0a28af463cf011894e14eff15a715d6a41
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfpVF/MF/3Nw/Nwk0cEMdV8IEMdV85/gzd:W7ZppApBULcfpHLcfpX2/Nw/Nwmx9

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  f657b995a02837a6ef314902fe88d0f5612b2b6b0fe5a3b4d86e00daa03a2d88
- Size
  
  63KB
- MD5
  
  83d4a7f9fdbddf45f24a5bce14db5367
- SHA1
  
  207e456e43f55f1588ba9d5f1f8ede85fce739b8
- SHA256
  
  f657b995a02837a6ef314902fe88d0f5612b2b6b0fe5a3b4d86e00daa03a2d88
- SHA512
  
  563a0227759fb9df6e6853030f52d84b7818e540599d1390f10a5cdd16e34e841c2050eccfcd33f92e26f5efcd603f0a28af463cf011894e14eff15a715d6a41
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfpVF/MF/3Nw/Nwk0cEMdV8IEMdV85/gzd:W7ZppApBULcfpHLcfpX2/Nw/Nwmx9
Score

9^/10

discovery ransomware
- Renames multiple (3690) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware