ca9f1f553124f26c45b71cbc978584a6297291452324ad4e2f497321dcc83b50 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca9f1f553124f26c45b71cbc978584a6297291452324ad4e2f497321dcc83b50
Size

95KB
Sample

240904-fsmk8avepl
MD5

80a34825c3ee4cfbb7dffc45ee01525b
SHA1

31f39b0854e276daa13883e40407f30728a356c5
SHA256

ca9f1f553124f26c45b71cbc978584a6297291452324ad4e2f497321dcc83b50
SHA512

eb13de5ce4768be409e5ea9cc4dcf855e7feb1f0b777684d723182a0e98bd994f4b57559371a58095f0f9d1af266df8fe870b6839d0e37915661af0be5595975
SSDEEP

1536:W7ZppApUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFsAcEht:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsQ

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  ca9f1f553124f26c45b71cbc978584a6297291452324ad4e2f497321dcc83b50
- Size
  
  95KB
- MD5
  
  80a34825c3ee4cfbb7dffc45ee01525b
- SHA1
  
  31f39b0854e276daa13883e40407f30728a356c5
- SHA256
  
  ca9f1f553124f26c45b71cbc978584a6297291452324ad4e2f497321dcc83b50
- SHA512
  
  eb13de5ce4768be409e5ea9cc4dcf855e7feb1f0b777684d723182a0e98bd994f4b57559371a58095f0f9d1af266df8fe870b6839d0e37915661af0be5595975
- SSDEEP
  
  1536:W7ZppApUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFsAcEht:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsQ
Score

9^/10

discovery ransomware
- Renames multiple (808) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware