0ed5082671e2e76364270ab05d71de8286a2b8ca8fe97f0abdfb394a480c50a2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f2516fd1e25be65e4bf14d145cd70c0N.exe
Size

83KB
Sample

240814-fs77xsxcka
MD5

1f2516fd1e25be65e4bf14d145cd70c0
SHA1

9aa9c6ca08ae143227106f06035e9309a3d0c56d
SHA256

0ed5082671e2e76364270ab05d71de8286a2b8ca8fe97f0abdfb394a480c50a2
SHA512

56d07cc3c426f10a68c48c21bd01d82b7dfc84c4208f3f889114d5ec9d5e495eed189af8f010df38f769d0ba808f870fe91682fb5fa6f9604be279bff1c54bee
SSDEEP

1536:W7ZppApUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFsAcEhw:6pWpUFpEhLfyBtPf50FWkFpPDze/qFs5

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  1f2516fd1e25be65e4bf14d145cd70c0N.exe
- Size
  
  83KB
- MD5
  
  1f2516fd1e25be65e4bf14d145cd70c0
- SHA1
  
  9aa9c6ca08ae143227106f06035e9309a3d0c56d
- SHA256
  
  0ed5082671e2e76364270ab05d71de8286a2b8ca8fe97f0abdfb394a480c50a2
- SHA512
  
  56d07cc3c426f10a68c48c21bd01d82b7dfc84c4208f3f889114d5ec9d5e495eed189af8f010df38f769d0ba808f870fe91682fb5fa6f9604be279bff1c54bee
- SSDEEP
  
  1536:W7ZppApUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFsAcEhw:6pWpUFpEhLfyBtPf50FWkFpPDze/qFs5
Score

9^/10

discovery ransomware
- Renames multiple (3191) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware