d9a66df23a3f945a9ad08ba678aaf65ac0904d524f04325f1c4bb301092cd831 | Triage

Sharing

General

Target

d9a66df23a3f945a9ad08ba678aaf65ac0904d524f04325f1c4bb301092cd831
Size

73KB
Sample

240803-ech3esscqp
MD5

4e7a7980c152749ea7127e5f6392ae74
SHA1

8493e58c30def15d7c6de75c4ce1bc557d311c14
SHA256

d9a66df23a3f945a9ad08ba678aaf65ac0904d524f04325f1c4bb301092cd831
SHA512

c23c838d39240b0c60603ef8e5790c2d374846f44839a8a5fe29d9ce26b220a6b2063b3e1563f0114b0efee1b7421fcebda577b45ffd4fa3e89f923bc1c20cce
SSDEEP

768:W7BlphA7pARFbhvOsTKnKqtb4HBZjlwGpCYnigugqOzM9bdifwMtxEwJjlVkTZ2g:W7ZhA7pApvOsOKM4HBhaGwOQ54xEIjl8

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  d9a66df23a3f945a9ad08ba678aaf65ac0904d524f04325f1c4bb301092cd831
- Size
  
  73KB
- MD5
  
  4e7a7980c152749ea7127e5f6392ae74
- SHA1
  
  8493e58c30def15d7c6de75c4ce1bc557d311c14
- SHA256
  
  d9a66df23a3f945a9ad08ba678aaf65ac0904d524f04325f1c4bb301092cd831
- SHA512
  
  c23c838d39240b0c60603ef8e5790c2d374846f44839a8a5fe29d9ce26b220a6b2063b3e1563f0114b0efee1b7421fcebda577b45ffd4fa3e89f923bc1c20cce
- SSDEEP
  
  768:W7BlphA7pARFbhvOsTKnKqtb4HBZjlwGpCYnigugqOzM9bdifwMtxEwJjlVkTZ2g:W7ZhA7pApvOsOKM4HBhaGwOQ54xEIjl8
Score

9^/10

discovery ransomware
- Renames multiple (856) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware