d8bbfb5889e4baa9dc93b2ea69049895c7eed42b32d1f7a1dcb4769e663807bd | Triage

Sharing

General

Target

d8bbfb5889e4baa9dc93b2ea69049895c7eed42b32d1f7a1dcb4769e663807bd
Size

50KB
Sample

240802-garynaydpq
MD5

3374c07ec08994556f7fd74f3dc4a4a3
SHA1

5d9a10e05a3dba5f8df6d12ddfaebb182e45be1e
SHA256

d8bbfb5889e4baa9dc93b2ea69049895c7eed42b32d1f7a1dcb4769e663807bd
SHA512

52953830f4c36a348cb386acbe4a86cd47c6a3e06288cbdbd8f836af02c63c67bd6d6222f8fe5572a8ef4eab1bbfbd31b51d9e3e21d6008cc25630040b148a41
SSDEEP

768:/7BlpQpARFbhdS5c5mRawAlW1VkRawAlW1V35h:/7ZQpAp86MLkL35h

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  d8bbfb5889e4baa9dc93b2ea69049895c7eed42b32d1f7a1dcb4769e663807bd
- Size
  
  50KB
- MD5
  
  3374c07ec08994556f7fd74f3dc4a4a3
- SHA1
  
  5d9a10e05a3dba5f8df6d12ddfaebb182e45be1e
- SHA256
  
  d8bbfb5889e4baa9dc93b2ea69049895c7eed42b32d1f7a1dcb4769e663807bd
- SHA512
  
  52953830f4c36a348cb386acbe4a86cd47c6a3e06288cbdbd8f836af02c63c67bd6d6222f8fe5572a8ef4eab1bbfbd31b51d9e3e21d6008cc25630040b148a41
- SSDEEP
  
  768:/7BlpQpARFbhdS5c5mRawAlW1VkRawAlW1V35h:/7ZQpAp86MLkL35h
Score

9^/10

discovery ransomware
- Renames multiple (3814) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware