b004d6c1a6d6844d89f394958807f9018ae2f876229f8117e56642d97db014ac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64ffc64fce062f9a2abd977c437934d0N.exe
Size

80KB
Sample

240818-vdqrnaxaml
MD5

64ffc64fce062f9a2abd977c437934d0
SHA1

07f71a4c81954a25d6fd6738cda5cab690ae0386
SHA256

b004d6c1a6d6844d89f394958807f9018ae2f876229f8117e56642d97db014ac
SHA512

da05a46f6bae1d10ff7a34a771b3ea66cc59d05a79db246efc73ced7a530229e3a9b7ca1b533f377f95c6eeed3678807d0ebd4bed5ccda52b4c2a6202bbc83c8
SSDEEP

1536:W7ZhA7pApH1d9oVLQthbqbY9oVLQthbq51Rn6wt7t5m0m698+Q+D:6e7WpP9oVLQthbYY9oVLQthbUrt7t5mK

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  64ffc64fce062f9a2abd977c437934d0N.exe
- Size
  
  80KB
- MD5
  
  64ffc64fce062f9a2abd977c437934d0
- SHA1
  
  07f71a4c81954a25d6fd6738cda5cab690ae0386
- SHA256
  
  b004d6c1a6d6844d89f394958807f9018ae2f876229f8117e56642d97db014ac
- SHA512
  
  da05a46f6bae1d10ff7a34a771b3ea66cc59d05a79db246efc73ced7a530229e3a9b7ca1b533f377f95c6eeed3678807d0ebd4bed5ccda52b4c2a6202bbc83c8
- SSDEEP
  
  1536:W7ZhA7pApH1d9oVLQthbqbY9oVLQthbq51Rn6wt7t5m0m698+Q+D:6e7WpP9oVLQthbYY9oVLQthbUrt7t5mK
Score

9^/10

discovery ransomware
- Renames multiple (2924) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware