01c468218050ac18a3fd8164fdbfbf3e0f27b2d368d5b8ab00aa538a8c042843 | Triage

Sharing

General

Target

01c468218050ac18a3fd8164fdbfbf3e0f27b2d368d5b8ab00aa538a8c042843N.exe
Size

57KB
Sample

240925-dkcd6s1enn
MD5

1f5eaa33a0d8d4fbe0d04290326df590
SHA1

cc3f712215c5be5306bc519fcd80f3790075a80d
SHA256

01c468218050ac18a3fd8164fdbfbf3e0f27b2d368d5b8ab00aa538a8c042843
SHA512

4d73bd142a50e1c1ef31528b5946f6eb8a5c0ac126377df8a9b9116ffc6aa97750c8e0197107beb6ace114e36cb1a0550dd354d9f8c50116ee60cfa0273fc4ef
SSDEEP

1536:W7ZrpApojswv0EhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFsXl:6rWpcsHEhLfyBtPf50FWkFpPDze/qFsr

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  01c468218050ac18a3fd8164fdbfbf3e0f27b2d368d5b8ab00aa538a8c042843N.exe
- Size
  
  57KB
- MD5
  
  1f5eaa33a0d8d4fbe0d04290326df590
- SHA1
  
  cc3f712215c5be5306bc519fcd80f3790075a80d
- SHA256
  
  01c468218050ac18a3fd8164fdbfbf3e0f27b2d368d5b8ab00aa538a8c042843
- SHA512
  
  4d73bd142a50e1c1ef31528b5946f6eb8a5c0ac126377df8a9b9116ffc6aa97750c8e0197107beb6ace114e36cb1a0550dd354d9f8c50116ee60cfa0273fc4ef
- SSDEEP
  
  1536:W7ZrpApojswv0EhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFsXl:6rWpcsHEhLfyBtPf50FWkFpPDze/qFsr
Score

9^/10

discovery ransomware
- Renames multiple (3139) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware