1397a0d3c4297d4eb5d86ee1343e17e3ee3447afaed8787770fcce89b177dc63 | Triage

Sharing

General

Target

f80f7f04bb8b3613fc6404bd5e13e8e0N.exe
Size

46KB
Sample

240825-jetddssgkd
MD5

f80f7f04bb8b3613fc6404bd5e13e8e0
SHA1

d39e6e2311dbee422d7707c364b472c123ae0db8
SHA256

1397a0d3c4297d4eb5d86ee1343e17e3ee3447afaed8787770fcce89b177dc63
SHA512

c981573aa7f4a4994c0c7112988397282a5f02759acf4b5fc795f718efe91afeb15a838be2cf30235bf306657a3c4c8e43aecca3bf8fa44f0b496ae9ed02e87c
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfpAfxRfxuKVKgKVKOFx3FxL:W7ZppApBULcfpHLcfpAfxRfxuw1wx

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  f80f7f04bb8b3613fc6404bd5e13e8e0N.exe
- Size
  
  46KB
- MD5
  
  f80f7f04bb8b3613fc6404bd5e13e8e0
- SHA1
  
  d39e6e2311dbee422d7707c364b472c123ae0db8
- SHA256
  
  1397a0d3c4297d4eb5d86ee1343e17e3ee3447afaed8787770fcce89b177dc63
- SHA512
  
  c981573aa7f4a4994c0c7112988397282a5f02759acf4b5fc795f718efe91afeb15a838be2cf30235bf306657a3c4c8e43aecca3bf8fa44f0b496ae9ed02e87c
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfpAfxRfxuKVKgKVKOFx3FxL:W7ZppApBULcfpHLcfpAfxRfxuw1wx
Score

9^/10

discovery ransomware
- Renames multiple (463) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware