c1f7f04383ba8457337c5ff1d0d2c5df87fd5ff92dc8c4f8517d0bc1d8f61b95 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1f7f04383ba8457337c5ff1d0d2c5df87fd5ff92dc8c4f8517d0bc1d8f61b95N
Size

78KB
Sample

241002-b571ga1dmp
MD5

680be15792c2ec5fa445b7f7534905f0
SHA1

f13b0813b77ab1bb8f6d971369e3a258288a0d2f
SHA256

c1f7f04383ba8457337c5ff1d0d2c5df87fd5ff92dc8c4f8517d0bc1d8f61b95
SHA512

8be067d72c9f0778ef52f6b34bb7bd171af6996318de93bb6d7edd62e6e0becf9775c3d2556fabcab47cb508e22d85178c9ff82b57e6739946dfddb2b1339682
SSDEEP

1536:W7ZppApBULcfpHLcfpX2/Nw/NwmxrLX6HuH9uH8:6pWpBwchcV2WxrL+uduc

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  c1f7f04383ba8457337c5ff1d0d2c5df87fd5ff92dc8c4f8517d0bc1d8f61b95N
- Size
  
  78KB
- MD5
  
  680be15792c2ec5fa445b7f7534905f0
- SHA1
  
  f13b0813b77ab1bb8f6d971369e3a258288a0d2f
- SHA256
  
  c1f7f04383ba8457337c5ff1d0d2c5df87fd5ff92dc8c4f8517d0bc1d8f61b95
- SHA512
  
  8be067d72c9f0778ef52f6b34bb7bd171af6996318de93bb6d7edd62e6e0becf9775c3d2556fabcab47cb508e22d85178c9ff82b57e6739946dfddb2b1339682
- SSDEEP
  
  1536:W7ZppApBULcfpHLcfpX2/Nw/NwmxrLX6HuH9uH8:6pWpBwchcV2WxrL+uduc
Score

9^/10

discovery ransomware
- Renames multiple (3517) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware