47612c910c4ea0273a2a4ff8d5cbf9f9935ed436b36af09fb8b9c0eb1899d858 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4421bba16d395d35af72bc003f981b50N.exe
Size

42KB
Sample

240821-ffls6avakm
MD5

4421bba16d395d35af72bc003f981b50
SHA1

fc282f5f6ec115b87b314eff3bf136d3ee1273d5
SHA256

47612c910c4ea0273a2a4ff8d5cbf9f9935ed436b36af09fb8b9c0eb1899d858
SHA512

9adb242a5bbd0d29ecf4cb7195aeda8f774571d24207b353865c9da170c0ef4a010e72f56812fb88a80439e411c7d7689029e28165f3e4adeb2fc67e437a322f
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFjqAJLOqAJLOwY:W7ZppApBULcfpHLcfpyDNwY

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  4421bba16d395d35af72bc003f981b50N.exe
- Size
  
  42KB
- MD5
  
  4421bba16d395d35af72bc003f981b50
- SHA1
  
  fc282f5f6ec115b87b314eff3bf136d3ee1273d5
- SHA256
  
  47612c910c4ea0273a2a4ff8d5cbf9f9935ed436b36af09fb8b9c0eb1899d858
- SHA512
  
  9adb242a5bbd0d29ecf4cb7195aeda8f774571d24207b353865c9da170c0ef4a010e72f56812fb88a80439e411c7d7689029e28165f3e4adeb2fc67e437a322f
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFjqAJLOqAJLOwY:W7ZppApBULcfpHLcfpyDNwY
Score

9^/10

discovery ransomware
- Renames multiple (3203) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware