8b9dff32ba6050cff609e650b09f004d7da9072cb262784d6338042ca1f3561e | Triage

Sharing

General

Target

a1fa272ab36213498b1ea78bdfe94b30N.exe
Size

70KB
Sample

240817-cqv8ss1hje
MD5

a1fa272ab36213498b1ea78bdfe94b30
SHA1

c47de66efb087b327d9fcb6ad2846448cc69d48a
SHA256

8b9dff32ba6050cff609e650b09f004d7da9072cb262784d6338042ca1f3561e
SHA512

8b18219486dca45e71ef3db314db73aadbd4136571735e5050303f88e05ddeb659f74301c8e12374367ed70546ed94114166cadeff596fb8c8d008103f29ba6f
SSDEEP

768:W7Blp+pARFbhtlmlQ3y3RWvf+wi1x9f+wi1xBTCcX8vgCcX8vSd5hdx8gl0:W7Z+pApfGQ3y3RWvfmRfm9sKsSd5a

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  a1fa272ab36213498b1ea78bdfe94b30N.exe
- Size
  
  70KB
- MD5
  
  a1fa272ab36213498b1ea78bdfe94b30
- SHA1
  
  c47de66efb087b327d9fcb6ad2846448cc69d48a
- SHA256
  
  8b9dff32ba6050cff609e650b09f004d7da9072cb262784d6338042ca1f3561e
- SHA512
  
  8b18219486dca45e71ef3db314db73aadbd4136571735e5050303f88e05ddeb659f74301c8e12374367ed70546ed94114166cadeff596fb8c8d008103f29ba6f
- SSDEEP
  
  768:W7Blp+pARFbhtlmlQ3y3RWvf+wi1x9f+wi1xBTCcX8vgCcX8vSd5hdx8gl0:W7Z+pApfGQ3y3RWvfmRfm9sKsSd5a
Score

9^/10

discovery ransomware
- Renames multiple (3178) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware