ead8be57c4955cde1559e1dd09aa44461256164bad8496203358bfeb5e4ff169 | Triage

Sharing

General

Target

afb1e1d1244e6bc17ac709ee406eb310N.exe
Size

38KB
Sample

240902-fc6n6asapk
MD5

afb1e1d1244e6bc17ac709ee406eb310
SHA1

501657d64f890087a6d4a153d8df1281608fd7e2
SHA256

ead8be57c4955cde1559e1dd09aa44461256164bad8496203358bfeb5e4ff169
SHA512

385a0fc7bda5f10be9e93bd3582cbaa6057427aa28db947714655ce3f03426dd653d527b27d0adf68c6daf1b48ca508c3e1a9c6cf4d24ff82e18f0fbfc40165d
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfproFNF9:W7ZppApBULcfpHLcfpyD9

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  afb1e1d1244e6bc17ac709ee406eb310N.exe
- Size
  
  38KB
- MD5
  
  afb1e1d1244e6bc17ac709ee406eb310
- SHA1
  
  501657d64f890087a6d4a153d8df1281608fd7e2
- SHA256
  
  ead8be57c4955cde1559e1dd09aa44461256164bad8496203358bfeb5e4ff169
- SHA512
  
  385a0fc7bda5f10be9e93bd3582cbaa6057427aa28db947714655ce3f03426dd653d527b27d0adf68c6daf1b48ca508c3e1a9c6cf4d24ff82e18f0fbfc40165d
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfproFNF9:W7ZppApBULcfpHLcfpyD9
Score

9^/10

discovery ransomware
- Renames multiple (3455) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware