4ad9e27c064217d9c99dd35ffa3b5261706ad14613a1bda1a8e7833e859c86d1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ad9e27c064217d9c99dd35ffa3b5261706ad14613a1bda1a8e7833e859c86d1.exe
Size

48KB
Sample

240908-cverlszark
MD5

fa1c678da560a754f00ec9693364f11d
SHA1

724fc7aabfff1d34d0b1d2aa7b635b119d5e23fb
SHA256

4ad9e27c064217d9c99dd35ffa3b5261706ad14613a1bda1a8e7833e859c86d1
SHA512

9b2f6150c00a0398ccd27d568c74b0d50e2d4c873713bbdd81112c04fda01ee8c1c19e58f1c0a895780d3a23ff9e05a36305465c006ba940d69572725b7de0be
SSDEEP

384:GBt7Br5xjL9AgA71FbhvuNBN10wpAp/lvolGClvolGwTCus7sj0h3MM0h3Ma7V:W7BlpppARFbhbt7Y7wTCg0hcM0hca

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  4ad9e27c064217d9c99dd35ffa3b5261706ad14613a1bda1a8e7833e859c86d1.exe
- Size
  
  48KB
- MD5
  
  fa1c678da560a754f00ec9693364f11d
- SHA1
  
  724fc7aabfff1d34d0b1d2aa7b635b119d5e23fb
- SHA256
  
  4ad9e27c064217d9c99dd35ffa3b5261706ad14613a1bda1a8e7833e859c86d1
- SHA512
  
  9b2f6150c00a0398ccd27d568c74b0d50e2d4c873713bbdd81112c04fda01ee8c1c19e58f1c0a895780d3a23ff9e05a36305465c006ba940d69572725b7de0be
- SSDEEP
  
  384:GBt7Br5xjL9AgA71FbhvuNBN10wpAp/lvolGClvolGwTCus7sj0h3MM0h3Ma7V:W7BlpppARFbhbt7Y7wTCg0hcM0hca
Score

9^/10

discovery ransomware
- Renames multiple (3682) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware