6849d98cc7256f8eb9064018b55a3e4e2b8826fdb2ae81ed20b391569c825724 | Triage

Sharing

General

Target

f7fe222385c49ff87d6f084a993693a0N.exe
Size

88KB
Sample

240817-3ev2rstaqc
MD5

f7fe222385c49ff87d6f084a993693a0
SHA1

be209491a06cd930b70085af5432e9a5b6338055
SHA256

6849d98cc7256f8eb9064018b55a3e4e2b8826fdb2ae81ed20b391569c825724
SHA512

b5223a237b9d0ea7b050a1def9ef3080892abe44be165785ce2f47f8fc5767a48fdced7dd251743ef3aecec0f40d3bfe7a51bdc879233f2d997048fd73518547
SSDEEP

1536:W7Z+pApfGQ3y3RWvfmRfm9sKsSd5GT6SsD3:6+WpDfmRfmh2TSD3

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  f7fe222385c49ff87d6f084a993693a0N.exe
- Size
  
  88KB
- MD5
  
  f7fe222385c49ff87d6f084a993693a0
- SHA1
  
  be209491a06cd930b70085af5432e9a5b6338055
- SHA256
  
  6849d98cc7256f8eb9064018b55a3e4e2b8826fdb2ae81ed20b391569c825724
- SHA512
  
  b5223a237b9d0ea7b050a1def9ef3080892abe44be165785ce2f47f8fc5767a48fdced7dd251743ef3aecec0f40d3bfe7a51bdc879233f2d997048fd73518547
- SSDEEP
  
  1536:W7Z+pApfGQ3y3RWvfmRfm9sKsSd5GT6SsD3:6+WpDfmRfmh2TSD3
Score

9^/10

discovery ransomware
- Renames multiple (3077) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware