6786f06c13c3b492514b326fae7439597d26926b18b65a1405e4987f1bdfea53 | Triage

Sharing

General

Target

6786f06c13c3b492514b326fae7439597d26926b18b65a1405e4987f1bdfea53
Size

198KB
Sample

240908-2pel4aygnm
MD5

88d703496c25e0613ea264a0479ae38c
SHA1

303f276cdd838a7fec9b4025827cf731ba8ad0be
SHA256

6786f06c13c3b492514b326fae7439597d26926b18b65a1405e4987f1bdfea53
SHA512

dac6b3238fccf7fdb76e1253f34615bc4bfb3d99cc52ee8e041e6d324961e0e9583ae0646e2927c0311f58e1b8b0022c89fc42b10635dbe39e30f98485894aad
SSDEEP

3072:6e7WpMNca3rytOkWpXfnYRl2l/9HSFHzJ0lBJTzkl:RqKB+tOkWKR0iJ0lTzkl

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  6786f06c13c3b492514b326fae7439597d26926b18b65a1405e4987f1bdfea53
- Size
  
  198KB
- MD5
  
  88d703496c25e0613ea264a0479ae38c
- SHA1
  
  303f276cdd838a7fec9b4025827cf731ba8ad0be
- SHA256
  
  6786f06c13c3b492514b326fae7439597d26926b18b65a1405e4987f1bdfea53
- SHA512
  
  dac6b3238fccf7fdb76e1253f34615bc4bfb3d99cc52ee8e041e6d324961e0e9583ae0646e2927c0311f58e1b8b0022c89fc42b10635dbe39e30f98485894aad
- SSDEEP
  
  3072:6e7WpMNca3rytOkWpXfnYRl2l/9HSFHzJ0lBJTzkl:RqKB+tOkWKR0iJ0lTzkl
Score

9^/10

discovery ransomware
- Renames multiple (3216) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware