9bc13a1d84067a5394ff0f8ea2c2cc9506b95c14029beadc749cc609d9028df9 | Triage

Sharing

General

Target

6901bd751d61af3796b7c343fd3a1f00N.exe
Size

69KB
Sample

240820-yme83azhjh
MD5

6901bd751d61af3796b7c343fd3a1f00
SHA1

e534e1c15012c9633bbe6687600f57e64b0993e0
SHA256

9bc13a1d84067a5394ff0f8ea2c2cc9506b95c14029beadc749cc609d9028df9
SHA512

5afa8995e6d84bda1fb7b0b3f07f873474196d05fe6acf6794f3c49cd4e95728bd592dae22a115fe6eae70d534a616487dc0efb2d9e7fe19ea22d08106046f6e
SSDEEP

1536:W7ZNLpApCZrt8PWGoPWGANdN+hEwHwDvZvc:6NLWpCZIzjwHwO

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  6901bd751d61af3796b7c343fd3a1f00N.exe
- Size
  
  69KB
- MD5
  
  6901bd751d61af3796b7c343fd3a1f00
- SHA1
  
  e534e1c15012c9633bbe6687600f57e64b0993e0
- SHA256
  
  9bc13a1d84067a5394ff0f8ea2c2cc9506b95c14029beadc749cc609d9028df9
- SHA512
  
  5afa8995e6d84bda1fb7b0b3f07f873474196d05fe6acf6794f3c49cd4e95728bd592dae22a115fe6eae70d534a616487dc0efb2d9e7fe19ea22d08106046f6e
- SSDEEP
  
  1536:W7ZNLpApCZrt8PWGoPWGANdN+hEwHwDvZvc:6NLWpCZIzjwHwO
Score

9^/10

discovery ransomware
- Renames multiple (381) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware