c090bf138295567dac974b9a57671a54443a706d26d090cf9312d77601201699 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79ac9858ce029a95df896bc47f9c1e90N.exe
Size

53KB
Sample

240821-y6jqlaydqc
MD5

79ac9858ce029a95df896bc47f9c1e90
SHA1

2f60b73a1fa6a6ea2f9e56c8a1ac2759c363cb3e
SHA256

c090bf138295567dac974b9a57671a54443a706d26d090cf9312d77601201699
SHA512

6f3de598ffdd896626421bc894e76c48b52cc2936a08c6007241dccb6aa46bd9c43b1e80bce62139be29ad7272905d7ad9a403045b4390c5aa18e7229910a8d9
SSDEEP

768:W7Blp2sspARFbh5YSfffynfWK9WKy1NGc1NGO:W7Z2sspAp5YSfffyneKIK0EKEO

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  79ac9858ce029a95df896bc47f9c1e90N.exe
- Size
  
  53KB
- MD5
  
  79ac9858ce029a95df896bc47f9c1e90
- SHA1
  
  2f60b73a1fa6a6ea2f9e56c8a1ac2759c363cb3e
- SHA256
  
  c090bf138295567dac974b9a57671a54443a706d26d090cf9312d77601201699
- SHA512
  
  6f3de598ffdd896626421bc894e76c48b52cc2936a08c6007241dccb6aa46bd9c43b1e80bce62139be29ad7272905d7ad9a403045b4390c5aa18e7229910a8d9
- SSDEEP
  
  768:W7Blp2sspARFbh5YSfffynfWK9WKy1NGc1NGO:W7Z2sspAp5YSfffyneKIK0EKEO
Score

9^/10

discovery ransomware
- Renames multiple (3256) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware