f1c59859edd804b91248250309f6efbcbe539c636c68da47c5786fc67e3bb159 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f1c59859edd804b91248250309f6efbcbe539c636c68da47c5786fc67e3bb159N
Size

53KB
Sample

240919-v1z9ls1enp
MD5

70fbe683c5e7fac893426db08e47f000
SHA1

84c5f052b321b82e58c080d0def280c7fc7d5fff
SHA256

f1c59859edd804b91248250309f6efbcbe539c636c68da47c5786fc67e3bb159
SHA512

f9d468bd936b7473e390a26d97c582f56383a755761a91cc3e160ccb1076414a1bd9a5eb8b35094bb4452a85b04466eaa6bc7feba00e318674c8a7f708b0a3c7
SSDEEP

768:W7BlphA7pARFbhL801VvM801Vvv7lSKSW7afHFCSW7afHFy:W7ZhA7pApw03vR03vxSKSWu0SWu8

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  f1c59859edd804b91248250309f6efbcbe539c636c68da47c5786fc67e3bb159N
- Size
  
  53KB
- MD5
  
  70fbe683c5e7fac893426db08e47f000
- SHA1
  
  84c5f052b321b82e58c080d0def280c7fc7d5fff
- SHA256
  
  f1c59859edd804b91248250309f6efbcbe539c636c68da47c5786fc67e3bb159
- SHA512
  
  f9d468bd936b7473e390a26d97c582f56383a755761a91cc3e160ccb1076414a1bd9a5eb8b35094bb4452a85b04466eaa6bc7feba00e318674c8a7f708b0a3c7
- SSDEEP
  
  768:W7BlphA7pARFbhL801VvM801Vvv7lSKSW7afHFCSW7afHFy:W7ZhA7pApw03vR03vxSKSWu0SWu8
Score

9^/10

discovery ransomware
- Renames multiple (3115) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware