af8248a9255c18c2ddd37a082227a384862d6a0e6d35a56b606afe79828d27d8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8afff1892ae9abe5ff831b80a035ccd0N.exe
Size

54KB
Sample

240905-jy7ecswcqq
MD5

8afff1892ae9abe5ff831b80a035ccd0
SHA1

debe542a3e1d596bc6d2e52ccbff09a28b43a881
SHA256

af8248a9255c18c2ddd37a082227a384862d6a0e6d35a56b606afe79828d27d8
SHA512

bbf518995e88b6f6e8e573e5470355e0a24cd4992d113d037d4c4fc307e6ce9d5a3bfe692f7ef623889207edaebe82d88fe206c3e137cdfbffde78a08a9f66cd
SSDEEP

1536:W7ZppApBULcfpHLcfpyD9uH9uH28mZQ4NQ4e:6pWpBwchcwD9uduW8mZ9N9e

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  8afff1892ae9abe5ff831b80a035ccd0N.exe
- Size
  
  54KB
- MD5
  
  8afff1892ae9abe5ff831b80a035ccd0
- SHA1
  
  debe542a3e1d596bc6d2e52ccbff09a28b43a881
- SHA256
  
  af8248a9255c18c2ddd37a082227a384862d6a0e6d35a56b606afe79828d27d8
- SHA512
  
  bbf518995e88b6f6e8e573e5470355e0a24cd4992d113d037d4c4fc307e6ce9d5a3bfe692f7ef623889207edaebe82d88fe206c3e137cdfbffde78a08a9f66cd
- SSDEEP
  
  1536:W7ZppApBULcfpHLcfpyD9uH9uH28mZQ4NQ4e:6pWpBwchcwD9uduW8mZ9N9e
Score

9^/10

discovery ransomware
- Renames multiple (487) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware