001368ef747c9b09c920a339537a45381bb492ef8a34e7e37e8bb22e3ecfd377 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc1e532a0f2935079af06557289c60a0N.exe
Size

80KB
Sample

240823-t4hcjavhpd
MD5

fc1e532a0f2935079af06557289c60a0
SHA1

b7904fb78f73389f9dbd5625e837547dc5a0df9f
SHA256

001368ef747c9b09c920a339537a45381bb492ef8a34e7e37e8bb22e3ecfd377
SHA512

076b4db5a4480ff7bb0cc2938c367f05f353b164b3d7875fb4ebb73569ff9015d482728ff28cf87e27d86129d3e813ca81368c718b19cf0e1583c2c570fbd7d5
SSDEEP

1536:W7Z+pApfGQ3y3RWvfmRfm9sKsSd55tDYTYRa9S2:6+WpDfmRfmhJts8o

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  fc1e532a0f2935079af06557289c60a0N.exe
- Size
  
  80KB
- MD5
  
  fc1e532a0f2935079af06557289c60a0
- SHA1
  
  b7904fb78f73389f9dbd5625e837547dc5a0df9f
- SHA256
  
  001368ef747c9b09c920a339537a45381bb492ef8a34e7e37e8bb22e3ecfd377
- SHA512
  
  076b4db5a4480ff7bb0cc2938c367f05f353b164b3d7875fb4ebb73569ff9015d482728ff28cf87e27d86129d3e813ca81368c718b19cf0e1583c2c570fbd7d5
- SSDEEP
  
  1536:W7Z+pApfGQ3y3RWvfmRfm9sKsSd55tDYTYRa9S2:6+WpDfmRfmhJts8o
Score

9^/10

discovery ransomware
- Renames multiple (3070) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware