294fe473f48608a9c56d99e4130eaf7b6b32108a204cc67e2b39b917a5f5583d | Triage

Sharing

General

Target

6d468d199baae77f9da6f81728cba100N.exe
Size

56KB
Sample

240905-gxnjravhmc
MD5

6d468d199baae77f9da6f81728cba100
SHA1

bb75ffce52d413f1e1ec3261a6323e5a19732f0a
SHA256

294fe473f48608a9c56d99e4130eaf7b6b32108a204cc67e2b39b917a5f5583d
SHA512

56c6120f1f0efcf4904f1d040681c6de259214b549c5bf8394c7b4d37cc07d9cb91c8957147277215a98fdefad55c11e9ebf087017f5c934692162d2a729bb13
SSDEEP

768:W7Blp2sspARFbh5YSfff9n1oXKCqzEIn1oXKCqzE1IwScIwSWF/MF/z:W7Z2sspAp5YSfffMrfr927

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  6d468d199baae77f9da6f81728cba100N.exe
- Size
  
  56KB
- MD5
  
  6d468d199baae77f9da6f81728cba100
- SHA1
  
  bb75ffce52d413f1e1ec3261a6323e5a19732f0a
- SHA256
  
  294fe473f48608a9c56d99e4130eaf7b6b32108a204cc67e2b39b917a5f5583d
- SHA512
  
  56c6120f1f0efcf4904f1d040681c6de259214b549c5bf8394c7b4d37cc07d9cb91c8957147277215a98fdefad55c11e9ebf087017f5c934692162d2a729bb13
- SSDEEP
  
  768:W7Blp2sspARFbh5YSfff9n1oXKCqzEIn1oXKCqzE1IwScIwSWF/MF/z:W7Z2sspAp5YSfffMrfr927
Score

9^/10

discovery ransomware
- Renames multiple (3368) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware