61495835f77d1b8a3f1e54b233900a154d5efa191f02f0f5cc6dd3cc74c2dc31 | Triage

Sharing

General

Target

61495835f77d1b8a3f1e54b233900a154d5efa191f02f0f5cc6dd3cc74c2dc31
Size

58KB
Sample

240806-2bepyaseqn
MD5

dc6bfefbcc6695aabbc05a0723c9df36
SHA1

21d1212faee145ba147171ee5b15707b534ad30c
SHA256

61495835f77d1b8a3f1e54b233900a154d5efa191f02f0f5cc6dd3cc74c2dc31
SHA512

8e945c7a5eab7e45d5936e3909ef5816f9c8f42ed99ea8c7570d085bfca36fc3d2bcb293ab0cfd2f3cfb0ffdfd1aa621fb0e7dbf47db2041fa0963b6bb5f540a
SSDEEP

768:/7BlpQpARFbhq1KX101je2/Qdme2/QdAe2/QdDe2/Qdme2/QdAe2/Qdqx:/7ZQpApq10

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  61495835f77d1b8a3f1e54b233900a154d5efa191f02f0f5cc6dd3cc74c2dc31
- Size
  
  58KB
- MD5
  
  dc6bfefbcc6695aabbc05a0723c9df36
- SHA1
  
  21d1212faee145ba147171ee5b15707b534ad30c
- SHA256
  
  61495835f77d1b8a3f1e54b233900a154d5efa191f02f0f5cc6dd3cc74c2dc31
- SHA512
  
  8e945c7a5eab7e45d5936e3909ef5816f9c8f42ed99ea8c7570d085bfca36fc3d2bcb293ab0cfd2f3cfb0ffdfd1aa621fb0e7dbf47db2041fa0963b6bb5f540a
- SSDEEP
  
  768:/7BlpQpARFbhq1KX101je2/Qdme2/QdAe2/QdDe2/Qdme2/QdAe2/Qdqx:/7ZQpApq10
Score

9^/10

discovery ransomware
- Renames multiple (3675) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware