f2b0a99a4da29ef2551c7d2f798f0149d35dbe01aa3c893fb374633e51f0411f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22f200177cf31282c93fb058d9e0b4f0N.exe
Size

97KB
Sample

240821-fl6qhs1cmg
MD5

22f200177cf31282c93fb058d9e0b4f0
SHA1

9b91797d9b788190eefdcd0b4b864f77ea72149f
SHA256

f2b0a99a4da29ef2551c7d2f798f0149d35dbe01aa3c893fb374633e51f0411f
SHA512

afae9a7fa3bc54f393a7d915e1dc42b9978c83ad5f61725a88e8aa1c4843f0c0329ede8506135d6c1dfb88292fb0e04a9b74e8ef98119e44df6b3d26a1cca5e9
SSDEEP

3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFslEhLfyBg:PqFF2Ie+efsLwv

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  22f200177cf31282c93fb058d9e0b4f0N.exe
- Size
  
  97KB
- MD5
  
  22f200177cf31282c93fb058d9e0b4f0
- SHA1
  
  9b91797d9b788190eefdcd0b4b864f77ea72149f
- SHA256
  
  f2b0a99a4da29ef2551c7d2f798f0149d35dbe01aa3c893fb374633e51f0411f
- SHA512
  
  afae9a7fa3bc54f393a7d915e1dc42b9978c83ad5f61725a88e8aa1c4843f0c0329ede8506135d6c1dfb88292fb0e04a9b74e8ef98119e44df6b3d26a1cca5e9
- SSDEEP
  
  3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFslEhLfyBg:PqFF2Ie+efsLwv
Score

9^/10

discovery ransomware
- Renames multiple (3082) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware