079afb8c3a759c5abb83e309bfb63f078c05941833e4059402c0f32f64dbb82a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

079afb8c3a759c5abb83e309bfb63f078c05941833e4059402c0f32f64dbb82a
Size

45KB
Sample

240726-w2havszcpb
MD5

db23bbe0c588d2771177452661de1b63
SHA1

a14263741054773f0b29de6f023eabf9afd89423
SHA256

079afb8c3a759c5abb83e309bfb63f078c05941833e4059402c0f32f64dbb82a
SHA512

5a771e7616e0ebc2d2c15de074c847c13f5c7f13f5e29d79f6364ca41ef56f90c15de320cba4f6fa6bc40e633baf725a94f8d2e1a505681c2eaec5097e2cd608
SSDEEP

768:W7BlpppARFbhHFoqAJwBqAJw1VyjVyLlvoxol:W7ZppApyVyjVyLlX

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  079afb8c3a759c5abb83e309bfb63f078c05941833e4059402c0f32f64dbb82a
- Size
  
  45KB
- MD5
  
  db23bbe0c588d2771177452661de1b63
- SHA1
  
  a14263741054773f0b29de6f023eabf9afd89423
- SHA256
  
  079afb8c3a759c5abb83e309bfb63f078c05941833e4059402c0f32f64dbb82a
- SHA512
  
  5a771e7616e0ebc2d2c15de074c847c13f5c7f13f5e29d79f6364ca41ef56f90c15de320cba4f6fa6bc40e633baf725a94f8d2e1a505681c2eaec5097e2cd608
- SSDEEP
  
  768:W7BlpppARFbhHFoqAJwBqAJw1VyjVyLlvoxol:W7ZppApyVyjVyLlX
Score

9^/10

discovery ransomware
- Renames multiple (3143) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware