103f639ec99a83efe3edf396cdb0e2c3814b129b59b244c89a7cbd94a1c91801 | Triage

Sharing

General

Target

55bf0aa9c3d746b8e47635c2eae2acaf77b4e65f3e6cbd8c51f6b657cdca4c91.zip
Size

31KB
Sample

220521-jplfjaebgn
MD5

4ab40dc44051ace4efcd96b6503ececc
SHA1

d48e2ef4d04e65f467e1d51338fadba497886cfa
SHA256

103f639ec99a83efe3edf396cdb0e2c3814b129b59b244c89a7cbd94a1c91801
SHA512

ba99c0f3d82b4dddd6e6ab8fb347095325227415368d52a7cb970689ff55c86bf717f87afb4e48a7bd0b48e5562f498210251eb6f1ab623f9781448a8243ebf9

Score

8^/10

persistence ransomware

Malware Config

Targets

- Target
  
  55bf0aa9c3d746b8e47635c2eae2acaf77b4e65f3e6cbd8c51f6b657cdca4c91.exe
- Size
  
  64KB
- MD5
  
  76c5b877fb931ed728df30c002bf8823
- SHA1
  
  16a8a21ef1a30849bedc514e42286de7676db5af
- SHA256
  
  55bf0aa9c3d746b8e47635c2eae2acaf77b4e65f3e6cbd8c51f6b657cdca4c91
- SHA512
  
  3ed1568c7650f536b91bea3de2afaf0e01f81d986c2968d012622fc542c06d536bf5b17e615ecbab0c89dafb600f1f245c84a9f13f45e8e03481a2d51e20728c
Score

8^/10

persistence ransomware
- Modifies extensions of user files
  Ransomware generally changes the extension on encrypted files.
  ransomware
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

persistenceransomware

behavioral2