7694b4cedd208944eedac4a9094dc98e568be36f4964a613731ca07c7adbad2d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13f5873f0ffe0e396d786121675e3e90N.exe
Size

50KB
Sample

240904-y7py1awalj
MD5

13f5873f0ffe0e396d786121675e3e90
SHA1

d4691f668d9bd9ca288eac5c0f5d32b5ce9701a4
SHA256

7694b4cedd208944eedac4a9094dc98e568be36f4964a613731ca07c7adbad2d
SHA512

7f5f82d73fa20787bcc15577a2398fa76839566982a1aa6987f81943cd4bfabeae5c69a1abff441e87b1328556110fcd7f164756e33843eb4cdd9216f780a9c3
SSDEEP

768:W7BlpppARFbhHFoqAJwBqAJw1VyjVyfxAkJhxAkJx:W7ZppApyVyjVy7

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  13f5873f0ffe0e396d786121675e3e90N.exe
- Size
  
  50KB
- MD5
  
  13f5873f0ffe0e396d786121675e3e90
- SHA1
  
  d4691f668d9bd9ca288eac5c0f5d32b5ce9701a4
- SHA256
  
  7694b4cedd208944eedac4a9094dc98e568be36f4964a613731ca07c7adbad2d
- SHA512
  
  7f5f82d73fa20787bcc15577a2398fa76839566982a1aa6987f81943cd4bfabeae5c69a1abff441e87b1328556110fcd7f164756e33843eb4cdd9216f780a9c3
- SSDEEP
  
  768:W7BlpppARFbhHFoqAJwBqAJw1VyjVyfxAkJhxAkJx:W7ZppApyVyjVy7
Score

9^/10

discovery ransomware
- Renames multiple (3278) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware