fdf230fe674af1b3704272e98bea3c824ea6f93bf2bfbc7e957b76b3e8e4df44 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1bc7daf42bc76ced16fe6cac9945d90N.exe
Size

93KB
Sample

240824-e1pj4svcrp
MD5

e1bc7daf42bc76ced16fe6cac9945d90
SHA1

b30f5ac1d769ecb2f8e6d027fe05d1a97bf5dccd
SHA256

fdf230fe674af1b3704272e98bea3c824ea6f93bf2bfbc7e957b76b3e8e4df44
SHA512

662c5fb4e2445e87ca267ef8b1771c9b750f11f95699431332b21103b93e97d70c0eb908723a7589a3bd3119c99fcce71e749e10ca58ce24a52b9d90904b0df4
SSDEEP

1536:W7Z9pApQESOHepOHe8G+6E65dyGdykNdNBKggH:69WpQE0zxgH

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  e1bc7daf42bc76ced16fe6cac9945d90N.exe
- Size
  
  93KB
- MD5
  
  e1bc7daf42bc76ced16fe6cac9945d90
- SHA1
  
  b30f5ac1d769ecb2f8e6d027fe05d1a97bf5dccd
- SHA256
  
  fdf230fe674af1b3704272e98bea3c824ea6f93bf2bfbc7e957b76b3e8e4df44
- SHA512
  
  662c5fb4e2445e87ca267ef8b1771c9b750f11f95699431332b21103b93e97d70c0eb908723a7589a3bd3119c99fcce71e749e10ca58ce24a52b9d90904b0df4
- SSDEEP
  
  1536:W7Z9pApQESOHepOHe8G+6E65dyGdykNdNBKggH:69WpQE0zxgH
Score

9^/10

discovery ransomware
- Renames multiple (3147) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware