557dba4249940b4fcaa06423bad8c9464c80730d87294af3afcf2c3f2c88b679 | Triage

Sharing

General

Target

557dba4249940b4fcaa06423bad8c9464c80730d87294af3afcf2c3f2c88b679
Size

42KB
Sample

240802-1qy7fswgjg
MD5

901ba65142de2d317b269c24f483876b
SHA1

6fc83a81df2e074664992f319fe87718e69519c5
SHA256

557dba4249940b4fcaa06423bad8c9464c80730d87294af3afcf2c3f2c88b679
SHA512

c8c7adb1711fa769a0d32e97a05ad05459938867d17576496026f55c7f2f7373b48b54d3f6b229fbca2a96d219f2d19447d7231e406f6350a10efe1701a0c358
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFew/DbAGw/DbA/:W7ZppApBULcfpHLcfpyDoA/

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  557dba4249940b4fcaa06423bad8c9464c80730d87294af3afcf2c3f2c88b679
- Size
  
  42KB
- MD5
  
  901ba65142de2d317b269c24f483876b
- SHA1
  
  6fc83a81df2e074664992f319fe87718e69519c5
- SHA256
  
  557dba4249940b4fcaa06423bad8c9464c80730d87294af3afcf2c3f2c88b679
- SHA512
  
  c8c7adb1711fa769a0d32e97a05ad05459938867d17576496026f55c7f2f7373b48b54d3f6b229fbca2a96d219f2d19447d7231e406f6350a10efe1701a0c358
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFew/DbAGw/DbA/:W7ZppApBULcfpHLcfpyDoA/
Score

9^/10

discovery ransomware
- Renames multiple (1024) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware