25383771755d7b54a0841bb8729dd6253f2dea5ac01a4d496b7bfa8fe5b6a407 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25383771755d7b54a0841bb8729dd6253f2dea5ac01a4d496b7bfa8fe5b6a407
Size

53KB
Sample

240805-ycz6gszdrf
MD5

4681a6a0b564ef68fa608e90ac9c10ce
SHA1

5b464d00401c0f93e6430ed45b94b8c1f65eec5a
SHA256

25383771755d7b54a0841bb8729dd6253f2dea5ac01a4d496b7bfa8fe5b6a407
SHA512

c415b43ca6bf7f8a2f79830160fd8f9236df63ee1dc7f4fcfe738e90f7cb8e9317d5e6605b8b95fbf051dd7d44d0021f2aaa56404d9d17166756e0765b50f81f
SSDEEP

768:W7BlpNLpARFbh4se3pUatOz2D7U0K5c5d:W7ZNLpAp4sCtOz246L

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  25383771755d7b54a0841bb8729dd6253f2dea5ac01a4d496b7bfa8fe5b6a407
- Size
  
  53KB
- MD5
  
  4681a6a0b564ef68fa608e90ac9c10ce
- SHA1
  
  5b464d00401c0f93e6430ed45b94b8c1f65eec5a
- SHA256
  
  25383771755d7b54a0841bb8729dd6253f2dea5ac01a4d496b7bfa8fe5b6a407
- SHA512
  
  c415b43ca6bf7f8a2f79830160fd8f9236df63ee1dc7f4fcfe738e90f7cb8e9317d5e6605b8b95fbf051dd7d44d0021f2aaa56404d9d17166756e0765b50f81f
- SSDEEP
  
  768:W7BlpNLpARFbh4se3pUatOz2D7U0K5c5d:W7ZNLpAp4sCtOz246L
Score

9^/10

discovery ransomware
- Renames multiple (3743) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware