5161962ae5a17a61ee2551c26e210cd5e2aaf801d0ac3bd80996628cec69dcc3 | Triage

Sharing

General

Target

4fdc642ab4a60b9df648f123cc782d60N.exe
Size

81KB
Sample

240821-fcaayszhlc
MD5

4fdc642ab4a60b9df648f123cc782d60
SHA1

8ca2294d452ec37f61ac3c300a4121b1d4162067
SHA256

5161962ae5a17a61ee2551c26e210cd5e2aaf801d0ac3bd80996628cec69dcc3
SHA512

5ec487679db2a35bc7910d35dc2e971b65d85d3841fb4e7bd764d3ddd34f3fc3f0f20577c4dd209a92d7cb8e3f7cc38b4da5ae8adfe57ee407ddb1c0790f4140
SSDEEP

1536:/7ZQpApze+eJfFpsJOfFpsJeFrxFrd4676rc:9QWpze+eJfFpsJOfFpsJ0rDrNN

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  4fdc642ab4a60b9df648f123cc782d60N.exe
- Size
  
  81KB
- MD5
  
  4fdc642ab4a60b9df648f123cc782d60
- SHA1
  
  8ca2294d452ec37f61ac3c300a4121b1d4162067
- SHA256
  
  5161962ae5a17a61ee2551c26e210cd5e2aaf801d0ac3bd80996628cec69dcc3
- SHA512
  
  5ec487679db2a35bc7910d35dc2e971b65d85d3841fb4e7bd764d3ddd34f3fc3f0f20577c4dd209a92d7cb8e3f7cc38b4da5ae8adfe57ee407ddb1c0790f4140
- SSDEEP
  
  1536:/7ZQpApze+eJfFpsJOfFpsJeFrxFrd4676rc:9QWpze+eJfFpsJOfFpsJ0rDrNN
Score

9^/10

discovery ransomware
- Renames multiple (318) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware