6fc83a9735d0202a699678d9e281507152de3e39c27595b5310a03e3bc96ac44 | Triage

Sharing

General

Target

01d94b38686158596bde95e8dba4b4a0N.exe
Size

85KB
Sample

240903-fytlqaxhnm
MD5

01d94b38686158596bde95e8dba4b4a0
SHA1

323bd223af030af3bd65ca5fe48f115f38324cbc
SHA256

6fc83a9735d0202a699678d9e281507152de3e39c27595b5310a03e3bc96ac44
SHA512

825003b9545066c24cf563f8506b94436d750ad74020898b5cfb1ccaaf76dd38aa9b764d0969c88bf52e23e9611da87d3cbf9f90642c356a927bbb471064110a
SSDEEP

768:W7BlpppARFbhHFoqAJwBqAJw1VyTzjGD7Ykgqrp3QolcnEdGgbVmVA:W7ZppApyVyaDpgB5nlgbQW

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  01d94b38686158596bde95e8dba4b4a0N.exe
- Size
  
  85KB
- MD5
  
  01d94b38686158596bde95e8dba4b4a0
- SHA1
  
  323bd223af030af3bd65ca5fe48f115f38324cbc
- SHA256
  
  6fc83a9735d0202a699678d9e281507152de3e39c27595b5310a03e3bc96ac44
- SHA512
  
  825003b9545066c24cf563f8506b94436d750ad74020898b5cfb1ccaaf76dd38aa9b764d0969c88bf52e23e9611da87d3cbf9f90642c356a927bbb471064110a
- SSDEEP
  
  768:W7BlpppARFbhHFoqAJwBqAJw1VyTzjGD7Ykgqrp3QolcnEdGgbVmVA:W7ZppApyVyaDpgB5nlgbQW
Score

9^/10

discovery ransomware
- Renames multiple (3260) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware