935f2838e7f94485306db7812d81185746a805f74ba184f6e2b5cfb1e91390ea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fba8ffd576c5917a768260a31e06cd70N.exe
Size

51KB
Sample

240902-a11vxsxdqe
MD5

fba8ffd576c5917a768260a31e06cd70
SHA1

1015d9fb88a5a46538f6b206a9d92fa13a75ebe8
SHA256

935f2838e7f94485306db7812d81185746a805f74ba184f6e2b5cfb1e91390ea
SHA512

9ee1bfc69a4accf2d4ab12918c7dab5b601f79ce5a6374bec4cd9526d2348d1de749f7badb98c7b0c8ad44fe2a8bf1c0a03e3e86f68838a1f091e65967207c21
SSDEEP

768:/7BlpQpARFbhNIiJwsJwwnZEQoVeDQoVeHRqXqN:/7ZQpAplJwsJwwnlY9qXqN

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  fba8ffd576c5917a768260a31e06cd70N.exe
- Size
  
  51KB
- MD5
  
  fba8ffd576c5917a768260a31e06cd70
- SHA1
  
  1015d9fb88a5a46538f6b206a9d92fa13a75ebe8
- SHA256
  
  935f2838e7f94485306db7812d81185746a805f74ba184f6e2b5cfb1e91390ea
- SHA512
  
  9ee1bfc69a4accf2d4ab12918c7dab5b601f79ce5a6374bec4cd9526d2348d1de749f7badb98c7b0c8ad44fe2a8bf1c0a03e3e86f68838a1f091e65967207c21
- SSDEEP
  
  768:/7BlpQpARFbhNIiJwsJwwnZEQoVeDQoVeHRqXqN:/7ZQpAplJwsJwwnlY9qXqN
Score

9^/10

discovery ransomware
- Renames multiple (3292) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware