f2f9eea82369cf9083720cbe03a4a9ef2d5789aba47916cecd173053842a723e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f2f9eea82369cf9083720cbe03a4a9ef2d5789aba47916cecd173053842a723e
Size

90KB
Sample

240817-h511gsxbjl
MD5

612085d66215d2f1cefbab0fe8ab1fd4
SHA1

01b72fb774c175451488d838d0b066157f9c9b74
SHA256

f2f9eea82369cf9083720cbe03a4a9ef2d5789aba47916cecd173053842a723e
SHA512

c4c221bb73b44b111cd5b85c7714d57d17f2e48e48cd4995976ab23b9305d36ddb03ef0c09d69465dfeb591a090993748836245f348e056c83b0d6f10f970d45
SSDEEP

1536:W7ZhA7pApH1pbeC5ZfTZF9zDZ4QYpNCvc+1ZmXfvytZ92vKSvM70U4LrrJ2aLPl/:6e7WpRpc6q7ZmZe

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  f2f9eea82369cf9083720cbe03a4a9ef2d5789aba47916cecd173053842a723e
- Size
  
  90KB
- MD5
  
  612085d66215d2f1cefbab0fe8ab1fd4
- SHA1
  
  01b72fb774c175451488d838d0b066157f9c9b74
- SHA256
  
  f2f9eea82369cf9083720cbe03a4a9ef2d5789aba47916cecd173053842a723e
- SHA512
  
  c4c221bb73b44b111cd5b85c7714d57d17f2e48e48cd4995976ab23b9305d36ddb03ef0c09d69465dfeb591a090993748836245f348e056c83b0d6f10f970d45
- SSDEEP
  
  1536:W7ZhA7pApH1pbeC5ZfTZF9zDZ4QYpNCvc+1ZmXfvytZ92vKSvM70U4LrrJ2aLPl/:6e7WpRpc6q7ZmZe
Score

9^/10

discovery ransomware
- Renames multiple (3646) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware