61faac5fa9224fbe5d3b38c89182dd2a663def347e85f170ab8665d92a8cd4b3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61faac5fa9224fbe5d3b38c89182dd2a663def347e85f170ab8665d92a8cd4b3N
Size

49KB
Sample

240921-ra24qswcmr
MD5

c351c1871ca2f8900d0fb2a553278cb0
SHA1

948f1cee1270b87a16068823e29fcf00cca718e5
SHA256

61faac5fa9224fbe5d3b38c89182dd2a663def347e85f170ab8665d92a8cd4b3
SHA512

35a57fa616d70acbac7be1fba44f1b1c6bad0a60573cbfbfe3f0fc1d1d854851347743e86e1aec5f0e6cc716c80a188f1853f95b0cf51de4cf72c121a721d207
SSDEEP

384:yBs7Br5xjL8AgA71Fbhv/FzzwzUAKAJOghAKAJOgl919aPnePn7:/7BlpQpARFbhNIvKAJxaKAJxbrH

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  61faac5fa9224fbe5d3b38c89182dd2a663def347e85f170ab8665d92a8cd4b3N
- Size
  
  49KB
- MD5
  
  c351c1871ca2f8900d0fb2a553278cb0
- SHA1
  
  948f1cee1270b87a16068823e29fcf00cca718e5
- SHA256
  
  61faac5fa9224fbe5d3b38c89182dd2a663def347e85f170ab8665d92a8cd4b3
- SHA512
  
  35a57fa616d70acbac7be1fba44f1b1c6bad0a60573cbfbfe3f0fc1d1d854851347743e86e1aec5f0e6cc716c80a188f1853f95b0cf51de4cf72c121a721d207
- SSDEEP
  
  384:yBs7Br5xjL8AgA71Fbhv/FzzwzUAKAJOghAKAJOgl919aPnePn7:/7BlpQpARFbhNIvKAJxaKAJxbrH
Score

9^/10

discovery ransomware
- Renames multiple (3287) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware