a7033fd0832f6c6a2410b13988f5a584288f918678bc0e85fbf2e3fb9bb1af6e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f805e7925bceda87f8a8b0a4c686e00N.exe
Size

40KB
Sample

240824-f1rj5swhqj
MD5

6f805e7925bceda87f8a8b0a4c686e00
SHA1

ec21539c252be296cc3af4c1d42928107dcb43f9
SHA256

a7033fd0832f6c6a2410b13988f5a584288f918678bc0e85fbf2e3fb9bb1af6e
SHA512

25132fca9b3d09c1374e04d222e1b203a25177353352b0e8112262ba7cbb10ddac7548426d45d54edea8bc46c91d52c261e1211efb613953083bd493956e39f2
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfpAfxRfx3S9:W7ZppApBULcfpHLcfpAfxRfx3S9

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  6f805e7925bceda87f8a8b0a4c686e00N.exe
- Size
  
  40KB
- MD5
  
  6f805e7925bceda87f8a8b0a4c686e00
- SHA1
  
  ec21539c252be296cc3af4c1d42928107dcb43f9
- SHA256
  
  a7033fd0832f6c6a2410b13988f5a584288f918678bc0e85fbf2e3fb9bb1af6e
- SHA512
  
  25132fca9b3d09c1374e04d222e1b203a25177353352b0e8112262ba7cbb10ddac7548426d45d54edea8bc46c91d52c261e1211efb613953083bd493956e39f2
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfpAfxRfx3S9:W7ZppApBULcfpHLcfpAfxRfx3S9
Score

9^/10

discovery ransomware
- Renames multiple (3412) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware