1e007ec36b08a0a34e616b0c58c0092f48e5a2ece03408d0e6f0074de10af3bf | Triage

Sharing

General

Target

9f68a1efe8c6baeaf05cb004c691b900N.exe
Size

77KB
Sample

240819-3c619avgqk
MD5

9f68a1efe8c6baeaf05cb004c691b900
SHA1

b638ae2779f2edef7dbf7ac3e676f9b36f30ef1b
SHA256

1e007ec36b08a0a34e616b0c58c0092f48e5a2ece03408d0e6f0074de10af3bf
SHA512

0d5bd917bd04c1c744fbdedf83970605e50acc9299397eafd3fe0120c24ebc46704b9ce406779736f28dc7a566f052cc242feab3de035b51de9db3584d8d3e98
SSDEEP

1536:W7ZNLpApCZrt8PWGoPWGANdN+hEwHwDvZvapBpYY9:6NLWpCZIzjwHw0

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  9f68a1efe8c6baeaf05cb004c691b900N.exe
- Size
  
  77KB
- MD5
  
  9f68a1efe8c6baeaf05cb004c691b900
- SHA1
  
  b638ae2779f2edef7dbf7ac3e676f9b36f30ef1b
- SHA256
  
  1e007ec36b08a0a34e616b0c58c0092f48e5a2ece03408d0e6f0074de10af3bf
- SHA512
  
  0d5bd917bd04c1c744fbdedf83970605e50acc9299397eafd3fe0120c24ebc46704b9ce406779736f28dc7a566f052cc242feab3de035b51de9db3584d8d3e98
- SSDEEP
  
  1536:W7ZNLpApCZrt8PWGoPWGANdN+hEwHwDvZvapBpYY9:6NLWpCZIzjwHw0
Score

9^/10

discovery ransomware
- Renames multiple (3155) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware