06fd4084f85935216b821bf9eb235210971585619482f578121ee8c7b1bc9117 | Triage

Sharing

General

Target

06fd4084f85935216b821bf9eb235210971585619482f578121ee8c7b1bc9117N
Size

32KB
Sample

240920-1x3hfs1blp
MD5

e7f1b05e8b0e7a834946a10640d582e0
SHA1

4eae5a5bd9ee18a427927b52d65f737d3b084ae3
SHA256

06fd4084f85935216b821bf9eb235210971585619482f578121ee8c7b1bc9117
SHA512

68cd803bbf5c0b5cb1730306244f4637225df31bf8bdc29dcc5b81e325d7fa88d5a51c8938c5eb755706edea92b26feb7240c05967394a6611773fafe777fa40
SSDEEP

192:tACUADIY0Br5xjL/ScAgAQmP1oynLb22vtPeGyvyq1iGyvyqkErB7rBYRvLdvLWE:GBt7Br5xjLfAgA71FbhvtPcIxk

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  06fd4084f85935216b821bf9eb235210971585619482f578121ee8c7b1bc9117N
- Size
  
  32KB
- MD5
  
  e7f1b05e8b0e7a834946a10640d582e0
- SHA1
  
  4eae5a5bd9ee18a427927b52d65f737d3b084ae3
- SHA256
  
  06fd4084f85935216b821bf9eb235210971585619482f578121ee8c7b1bc9117
- SHA512
  
  68cd803bbf5c0b5cb1730306244f4637225df31bf8bdc29dcc5b81e325d7fa88d5a51c8938c5eb755706edea92b26feb7240c05967394a6611773fafe777fa40
- SSDEEP
  
  192:tACUADIY0Br5xjL/ScAgAQmP1oynLb22vtPeGyvyq1iGyvyqkErB7rBYRvLdvLWE:GBt7Br5xjLfAgA71FbhvtPcIxk
Score

9^/10

discovery ransomware
- Renames multiple (3358) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware