4cfd79f807bdcc70ec53f6683b1f38c93364ee409e488a59d5573df2c4a6bfc9 | Triage

Sharing

General

Target

4cfd79f807bdcc70ec53f6683b1f38c93364ee409e488a59d5573df2c4a6bfc9
Size

59KB
Sample

240726-1jffrswfkq
MD5

476732bbbd3ce241e018eee407d9ae54
SHA1

e92a9d8f9bb76089f81f8cde5ccaa95322c4ef97
SHA256

4cfd79f807bdcc70ec53f6683b1f38c93364ee409e488a59d5573df2c4a6bfc9
SHA512

e3cdbe022748921ac21dd356d03f8b390263df8b6943d54ff39903f1a1534ab42d56f5314482f3e0bebd990ab3f900fec9f02f8a8c460d29e144a84a1cee9d63
SSDEEP

1536:W7ZppApB7tlJ5OvtlJ5OwF7CujdyGdyMMkPMkPXdXg:6pWpB7tcttFOuZtQ

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  4cfd79f807bdcc70ec53f6683b1f38c93364ee409e488a59d5573df2c4a6bfc9
- Size
  
  59KB
- MD5
  
  476732bbbd3ce241e018eee407d9ae54
- SHA1
  
  e92a9d8f9bb76089f81f8cde5ccaa95322c4ef97
- SHA256
  
  4cfd79f807bdcc70ec53f6683b1f38c93364ee409e488a59d5573df2c4a6bfc9
- SHA512
  
  e3cdbe022748921ac21dd356d03f8b390263df8b6943d54ff39903f1a1534ab42d56f5314482f3e0bebd990ab3f900fec9f02f8a8c460d29e144a84a1cee9d63
- SSDEEP
  
  1536:W7ZppApB7tlJ5OvtlJ5OwF7CujdyGdyMMkPMkPXdXg:6pWpB7tcttFOuZtQ
Score

9^/10

discovery ransomware
- Renames multiple (3439) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware