dceab3e1016638a05b0c34b71a5c2df70b77e0758771892cea638761d40e382c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

614062c4babd45f6c6e3c57555999a80N.exe
Size

44KB
Sample

240816-24sghawfnr
MD5

614062c4babd45f6c6e3c57555999a80
SHA1

fac451e9b71f3a5dcae6be50327134285f39607e
SHA256

dceab3e1016638a05b0c34b71a5c2df70b77e0758771892cea638761d40e382c
SHA512

4e40b0d0a719912d4a876e7569a6f3d14e803896c073dc18c2430fca46c0d27fab0bd5349bf31200d941a1d80b68ff79742436a9b3a60159115b6632794d462f
SSDEEP

192:tACUADIY0Br5xjL/nznlAgAQmP1oynLb22vtI0zWXPXj:GBt7Br5xjL7lAgA71Fbhvt3M

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  614062c4babd45f6c6e3c57555999a80N.exe
- Size
  
  44KB
- MD5
  
  614062c4babd45f6c6e3c57555999a80
- SHA1
  
  fac451e9b71f3a5dcae6be50327134285f39607e
- SHA256
  
  dceab3e1016638a05b0c34b71a5c2df70b77e0758771892cea638761d40e382c
- SHA512
  
  4e40b0d0a719912d4a876e7569a6f3d14e803896c073dc18c2430fca46c0d27fab0bd5349bf31200d941a1d80b68ff79742436a9b3a60159115b6632794d462f
- SSDEEP
  
  192:tACUADIY0Br5xjL/nznlAgAQmP1oynLb22vtI0zWXPXj:GBt7Br5xjL7lAgA71Fbhvt3M
Score

9^/10

discovery ransomware
- Renames multiple (3248) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware