6a119d6591d9c632e0022ef3de7c3014166538571e430f7a575d7d838f9a667d | Triage

Sharing

General

Target

Trojan.Win32.Zombie.rfn6a119d6591d9c632e0022ef3de7c3014166538571e430f7a575d7d838f9a667dN
Size

80KB
Sample

240919-fs9qrasdja
MD5

5d04ce418d3d50aa2b9fad6e4ecaa520
SHA1

8570c4c26a33ca5db08f75ef149b89af9e38779e
SHA256

6a119d6591d9c632e0022ef3de7c3014166538571e430f7a575d7d838f9a667d
SHA512

572b9d23fd1572c058a8245f47a7c6551efea14bed0a5d002ea8cfd27cb92e042b3bebbe57f7a7d9c0ea92ae362344c03e5eb7aacbe4e1925f901d9b9e61c56c
SSDEEP

1536:W7ZNLpApCZrt8PWGoPWGANdN+hEwHwDvZvGrVQb+:6NLWpCZIzjwHwIreC

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  Trojan.Win32.Zombie.rfn6a119d6591d9c632e0022ef3de7c3014166538571e430f7a575d7d838f9a667dN
- Size
  
  80KB
- MD5
  
  5d04ce418d3d50aa2b9fad6e4ecaa520
- SHA1
  
  8570c4c26a33ca5db08f75ef149b89af9e38779e
- SHA256
  
  6a119d6591d9c632e0022ef3de7c3014166538571e430f7a575d7d838f9a667d
- SHA512
  
  572b9d23fd1572c058a8245f47a7c6551efea14bed0a5d002ea8cfd27cb92e042b3bebbe57f7a7d9c0ea92ae362344c03e5eb7aacbe4e1925f901d9b9e61c56c
- SSDEEP
  
  1536:W7ZNLpApCZrt8PWGoPWGANdN+hEwHwDvZvGrVQb+:6NLWpCZIzjwHwIreC
Score

9^/10

discovery ransomware
- Renames multiple (3517) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware