1f5b1ab2c406622e700748ab76e7d51ee8304198b103a2f32c6b3be7393dfb4c | Triage

Sharing

General

Target

1f5b1ab2c406622e700748ab76e7d51ee8304198b103a2f32c6b3be7393dfb4c
Size

33KB
Sample

240801-zb2tcswcnn
MD5

08aad3ace781d66fbe36c389b0d38483
SHA1

bac7c440417c2b0a1871874a00bcd32a8d891600
SHA256

1f5b1ab2c406622e700748ab76e7d51ee8304198b103a2f32c6b3be7393dfb4c
SHA512

78bf42f28d45446244ae50a0618e9d5437bbfbf965775ff6b7deb772add5fa253ed81bb9abb69cedecd299e7d7ac5f1387ab86547d41b96d7b504bb95c2ee771
SSDEEP

192:pACU3DIY0Br5xjL/EAgAQmP1oynLb22vB7m/FJHo7m/FJHhpqzXW:yBs7Br5xjL8AgA71FbhvsR

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  1f5b1ab2c406622e700748ab76e7d51ee8304198b103a2f32c6b3be7393dfb4c
- Size
  
  33KB
- MD5
  
  08aad3ace781d66fbe36c389b0d38483
- SHA1
  
  bac7c440417c2b0a1871874a00bcd32a8d891600
- SHA256
  
  1f5b1ab2c406622e700748ab76e7d51ee8304198b103a2f32c6b3be7393dfb4c
- SHA512
  
  78bf42f28d45446244ae50a0618e9d5437bbfbf965775ff6b7deb772add5fa253ed81bb9abb69cedecd299e7d7ac5f1387ab86547d41b96d7b504bb95c2ee771
- SSDEEP
  
  192:pACU3DIY0Br5xjL/EAgAQmP1oynLb22vB7m/FJHo7m/FJHhpqzXW:yBs7Br5xjL8AgA71FbhvsR
Score

9^/10

discovery ransomware
- Renames multiple (1464) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware