4b601e139e2013a394ed72527a74ab391247938a30a1221f8d8b3d57d35f5194 | Triage

Sharing

General

Target

fcf79b97ec6c86fc1839235867eebf60N.exe
Size

77KB
Sample

240903-ymhn7avgrj
MD5

fcf79b97ec6c86fc1839235867eebf60
SHA1

d8160fc49f04d83703aa2a949566f98edf4e88e5
SHA256

4b601e139e2013a394ed72527a74ab391247938a30a1221f8d8b3d57d35f5194
SHA512

e3341412dd3b5ee755e8fde6f1d187db865bee6a7bbc86471cb633c63149953a9d4af6cea6cd591bae036a16f0bf74dc98b4e029d03f409051d33f16795394a5
SSDEEP

768:W7BlpDpARFbhYQkQzaxkd+axkdo176/hvYaJaMGw4PCs2B24PCs2BHE4JAIAepET:W7ZDpApYbVK4vx4PN54PN4OHepOHeZSL

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  fcf79b97ec6c86fc1839235867eebf60N.exe
- Size
  
  77KB
- MD5
  
  fcf79b97ec6c86fc1839235867eebf60
- SHA1
  
  d8160fc49f04d83703aa2a949566f98edf4e88e5
- SHA256
  
  4b601e139e2013a394ed72527a74ab391247938a30a1221f8d8b3d57d35f5194
- SHA512
  
  e3341412dd3b5ee755e8fde6f1d187db865bee6a7bbc86471cb633c63149953a9d4af6cea6cd591bae036a16f0bf74dc98b4e029d03f409051d33f16795394a5
- SSDEEP
  
  768:W7BlpDpARFbhYQkQzaxkd+axkdo176/hvYaJaMGw4PCs2B24PCs2BHE4JAIAepET:W7ZDpApYbVK4vx4PN54PN4OHepOHeZSL
Score

9^/10

discovery ransomware
- Renames multiple (3246) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware