6bf8ae40761fd741db274fdf8f607398d5e305ea68beb57269295f604384ab82 | Triage

Sharing

General

Target

79ca9927b27dd151523f89934b2f46e0N.exe
Size

88KB
Sample

240817-jg8absvaqf
MD5

79ca9927b27dd151523f89934b2f46e0
SHA1

f761a927de5c19d9147ba9075e75317bffae67eb
SHA256

6bf8ae40761fd741db274fdf8f607398d5e305ea68beb57269295f604384ab82
SHA512

83a0fafdc8b1d80f79a1a5ce5ca2192f72a53217d7fe0bff88b5ba2cb979297413fa59ccad02ef9af67f3d556a37c249629b557fe7a7b508b934cb591dcdaf82
SSDEEP

1536:W7ZhA7pApH9QHwtRF9ESWu0SWutlggalggyaRjvmujvmRzqzlmJgwmJg/S2:6e7WpHIyRF9ESWu0SWuDm841qL

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  79ca9927b27dd151523f89934b2f46e0N.exe
- Size
  
  88KB
- MD5
  
  79ca9927b27dd151523f89934b2f46e0
- SHA1
  
  f761a927de5c19d9147ba9075e75317bffae67eb
- SHA256
  
  6bf8ae40761fd741db274fdf8f607398d5e305ea68beb57269295f604384ab82
- SHA512
  
  83a0fafdc8b1d80f79a1a5ce5ca2192f72a53217d7fe0bff88b5ba2cb979297413fa59ccad02ef9af67f3d556a37c249629b557fe7a7b508b934cb591dcdaf82
- SSDEEP
  
  1536:W7ZhA7pApH9QHwtRF9ESWu0SWutlggalggyaRjvmujvmRzqzlmJgwmJg/S2:6e7WpHIyRF9ESWu0SWuDm841qL
Score

9^/10

discovery ransomware
- Renames multiple (305) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware