da0cabe23c7bdb7cc714a19584aecfe39087f9f93b156d5b176cfc1c1b582810 | Triage

Sharing

General

Target

679e60230df99d5dd322881fd580b39c
Size

436KB
Sample

231226-ml5lsagbe9
MD5

679e60230df99d5dd322881fd580b39c
SHA1

81bb69639a170f088a721f9c737bc47494c26f83
SHA256

da0cabe23c7bdb7cc714a19584aecfe39087f9f93b156d5b176cfc1c1b582810
SHA512

c44d807bcbd62660c4760f0411b06a753ac54d01ff8781db74a8f472e71c3d8f535c1142c5d91a29213119a1cc2ef0d2426e5ff880becf724234183b42b6af07
SSDEEP

6144:2/qFbO4bGNqL43QWqqPheG/lCcC9msYwXEvEsdqthb5cC9msYwXEvEsdqthbO0:2/qPKQWJ3/2wsYwXFtlwsYwXFtj

Score

9^/10

ransomware

Malware Config

Targets

- Target
  
  679e60230df99d5dd322881fd580b39c
- Size
  
  436KB
- MD5
  
  679e60230df99d5dd322881fd580b39c
- SHA1
  
  81bb69639a170f088a721f9c737bc47494c26f83
- SHA256
  
  da0cabe23c7bdb7cc714a19584aecfe39087f9f93b156d5b176cfc1c1b582810
- SHA512
  
  c44d807bcbd62660c4760f0411b06a753ac54d01ff8781db74a8f472e71c3d8f535c1142c5d91a29213119a1cc2ef0d2426e5ff880becf724234183b42b6af07
- SSDEEP
  
  6144:2/qFbO4bGNqL43QWqqPheG/lCcC9msYwXEvEsdqthb5cC9msYwXEvEsdqthbO0:2/qPKQWJ3/2wsYwXFtlwsYwXFtj
Score

9^/10

ransomware
- Deletes shadow copies
  Ransomware often targets backup files to inhibit system recovery.
  ransomware
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

File Deletion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Inhibit System Recovery

Tasks

static1

behavioral1

behavioral2