76c6b550733b74d21bad22b8d94820c5a9f09d3ee2578628f48c71412c3dc3d5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ca466e60ca6203bf2e747db58fe10b0N.exe
Size

80KB
Sample

240903-jwelka1frm
MD5

8ca466e60ca6203bf2e747db58fe10b0
SHA1

c1c3e87ddbb157fdad185fff80df91548b9bdb03
SHA256

76c6b550733b74d21bad22b8d94820c5a9f09d3ee2578628f48c71412c3dc3d5
SHA512

7c1c1f7c8ae83775c69fb1a348bff67ac36aca7260ac5249585dc56c39ddf667758826c35ef3fc761bcc8b89798421ae121398c20028eb9c4fee8d4c83e86eed
SSDEEP

1536:W7ZhA7pApMNcH6gW4Wvs9s2cic8GhGvn3wXKH:6e7WpMNcK9vG1W2wXKH

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  8ca466e60ca6203bf2e747db58fe10b0N.exe
- Size
  
  80KB
- MD5
  
  8ca466e60ca6203bf2e747db58fe10b0
- SHA1
  
  c1c3e87ddbb157fdad185fff80df91548b9bdb03
- SHA256
  
  76c6b550733b74d21bad22b8d94820c5a9f09d3ee2578628f48c71412c3dc3d5
- SHA512
  
  7c1c1f7c8ae83775c69fb1a348bff67ac36aca7260ac5249585dc56c39ddf667758826c35ef3fc761bcc8b89798421ae121398c20028eb9c4fee8d4c83e86eed
- SSDEEP
  
  1536:W7ZhA7pApMNcH6gW4Wvs9s2cic8GhGvn3wXKH:6e7WpMNcK9vG1W2wXKH
Score

9^/10

discovery ransomware
- Renames multiple (3156) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware