0f368620bc0592eded78381188d0572c2f5d9a4cb0e57d3c5e02c9cdbcd371dc | Triage

Resubmissions

23/07/2024, 16:33

240723-t2seqaygrl 9

22/07/2024, 18:45

240722-xegw9asdqn 9

22/07/2024, 18:42

240722-xcc6aascmp 9

Sharing

General

Target

0f368620bc0592eded78381188d0572c2f5d9a4cb0e57d3c5e02c9cdbcd371dc
Size

41KB
Sample

240723-t2seqaygrl
MD5

c83625f1157252cac9f83beb180d2d64
SHA1

096d51f5c2cd752973cf1fdd47f482b18f3b6cb7
SHA256

0f368620bc0592eded78381188d0572c2f5d9a4cb0e57d3c5e02c9cdbcd371dc
SHA512

65be8170c22680dd8e6459958b260515608714cf1f9b148f82509cdc57a19e2a26933358b72792d6a263ae0f6c64b6d0b4911f541bbb397280cc60242bb2ebd9
SSDEEP

768:W7BlphA7pARFbhOm0CAbLg++PJHJzIWD+6/huEQhuEYT:W7ZhA7pApH1++PJHJX18EQ8EYT

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  0f368620bc0592eded78381188d0572c2f5d9a4cb0e57d3c5e02c9cdbcd371dc
- Size
  
  41KB
- MD5
  
  c83625f1157252cac9f83beb180d2d64
- SHA1
  
  096d51f5c2cd752973cf1fdd47f482b18f3b6cb7
- SHA256
  
  0f368620bc0592eded78381188d0572c2f5d9a4cb0e57d3c5e02c9cdbcd371dc
- SHA512
  
  65be8170c22680dd8e6459958b260515608714cf1f9b148f82509cdc57a19e2a26933358b72792d6a263ae0f6c64b6d0b4911f541bbb397280cc60242bb2ebd9
- SSDEEP
  
  768:W7BlphA7pARFbhOm0CAbLg++PJHJzIWD+6/huEQhuEYT:W7ZhA7pApH1++PJHJX18EQ8EYT
Score

9^/10

discovery ransomware
- Renames multiple (3754) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware