fea7119d897e067c97bd007c37d64933cb000324d1e775d06b4957ffb5f3cbdf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63ff710c30e55bedcfd023b6056e15a0N.exe
Size

97KB
Sample

240814-ctqgqazdkp
MD5

63ff710c30e55bedcfd023b6056e15a0
SHA1

783e50cb5e5ee5894f5090ec579066d0fff0813f
SHA256

fea7119d897e067c97bd007c37d64933cb000324d1e775d06b4957ffb5f3cbdf
SHA512

d008a2937dc098515729c21fee9eb6f888d30b85b13b316b4de4eb43f585d55a80713560ecc8c516d831706b72bf25190ae90fabc9475f9b0139cb227301c251
SSDEEP

3072:6e7WpHIyRF9ESWu0SWujKsKRsP9fVL9ih2x24:RqlIyFESWu0SWu86jYh2x24

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  63ff710c30e55bedcfd023b6056e15a0N.exe
- Size
  
  97KB
- MD5
  
  63ff710c30e55bedcfd023b6056e15a0
- SHA1
  
  783e50cb5e5ee5894f5090ec579066d0fff0813f
- SHA256
  
  fea7119d897e067c97bd007c37d64933cb000324d1e775d06b4957ffb5f3cbdf
- SHA512
  
  d008a2937dc098515729c21fee9eb6f888d30b85b13b316b4de4eb43f585d55a80713560ecc8c516d831706b72bf25190ae90fabc9475f9b0139cb227301c251
- SSDEEP
  
  3072:6e7WpHIyRF9ESWu0SWujKsKRsP9fVL9ih2x24:RqlIyFESWu0SWu86jYh2x24
Score

9^/10

discovery ransomware
- Renames multiple (3267) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware