4fa7dc1cfe0cb8b7e7d9092ab12ab90fcaf9ea3c7abd435d41755aa692a5046a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8dd30a42181286e5a505de2564fe8ba0N.exe
Size

54KB
Sample

240819-kmpkvaxfmn
MD5

8dd30a42181286e5a505de2564fe8ba0
SHA1

3fd143a802fe18b063e47207d97edad83b54587a
SHA256

4fa7dc1cfe0cb8b7e7d9092ab12ab90fcaf9ea3c7abd435d41755aa692a5046a
SHA512

cf8b25cdaf7cd7ecdd5d984eb05f830be039a98e0184c6f913a7cb132061544dfb63db44fcfb1df9d516a48ca770010906dabffe539c36e57a84c4dd8c335064
SSDEEP

768:W7BlpppARFbhHFoqAJwBqAJw1VyjVyfxAkJhxAkJU7AiPWiPF:W7ZppApyVyjVyi77

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  8dd30a42181286e5a505de2564fe8ba0N.exe
- Size
  
  54KB
- MD5
  
  8dd30a42181286e5a505de2564fe8ba0
- SHA1
  
  3fd143a802fe18b063e47207d97edad83b54587a
- SHA256
  
  4fa7dc1cfe0cb8b7e7d9092ab12ab90fcaf9ea3c7abd435d41755aa692a5046a
- SHA512
  
  cf8b25cdaf7cd7ecdd5d984eb05f830be039a98e0184c6f913a7cb132061544dfb63db44fcfb1df9d516a48ca770010906dabffe539c36e57a84c4dd8c335064
- SSDEEP
  
  768:W7BlpppARFbhHFoqAJwBqAJw1VyjVyfxAkJhxAkJU7AiPWiPF:W7ZppApyVyjVyi77
Score

9^/10

discovery ransomware
- Renames multiple (3158) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware