0ef7c5bced76dac22162cae32eb81bfcb4611d4cc777e0f8585d9cce4f55fbc6 | Triage

Sharing

General

Target

f761581b7d46004780711d50153f9c10N.exe
Size

43KB
Sample

240819-khmkpatfrf
MD5

f761581b7d46004780711d50153f9c10
SHA1

5bcce092bbcf124c934bf0138698e164e53f1335
SHA256

0ef7c5bced76dac22162cae32eb81bfcb4611d4cc777e0f8585d9cce4f55fbc6
SHA512

2fd8dbcc07822baeb03d155fac61153071da0f661f81854e24f956633e9b656c2a088d833065fa4d4fde85600ad888b6c3f7c3361171b8381c8982f107149d96
SSDEEP

768:W7BlphA7pARFbhM0Kkq81LOyq81LOHwOoJVO7iJKqOxiJRDOWiJ4JOAiJ/rOqiJv:W7ZhA7pApM21LOA1LO2c6b25gc6b25up

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  f761581b7d46004780711d50153f9c10N.exe
- Size
  
  43KB
- MD5
  
  f761581b7d46004780711d50153f9c10
- SHA1
  
  5bcce092bbcf124c934bf0138698e164e53f1335
- SHA256
  
  0ef7c5bced76dac22162cae32eb81bfcb4611d4cc777e0f8585d9cce4f55fbc6
- SHA512
  
  2fd8dbcc07822baeb03d155fac61153071da0f661f81854e24f956633e9b656c2a088d833065fa4d4fde85600ad888b6c3f7c3361171b8381c8982f107149d96
- SSDEEP
  
  768:W7BlphA7pARFbhM0Kkq81LOyq81LOHwOoJVO7iJKqOxiJRDOWiJ4JOAiJ/rOqiJv:W7ZhA7pApM21LOA1LO2c6b25gc6b25up
Score

9^/10

discovery ransomware
- Renames multiple (3119) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware