27a6b4d0ff4ae21591b27540354ebb05d6a646a445514df8db3dab0714f10f5d | Triage

Sharing

General

Target

27a6b4d0ff4ae21591b27540354ebb05d6a646a445514df8db3dab0714f10f5d
Size

46KB
Sample

240809-ydbjhsxbrq
MD5

ade202a05c086fc28953ad525d4cade8
SHA1

931a0e2fdd04bc0cd9e3fa28b39db5c000dc39dc
SHA256

27a6b4d0ff4ae21591b27540354ebb05d6a646a445514df8db3dab0714f10f5d
SHA512

a2da6a0fe72dad9c4a7ed9db51925b75685f80ae542df630e6077d740aa17efb35989c0acdeaa434f9e2522a42faf7c96c730fa7d5739303e3c884eff32aed77
SSDEEP

768:W7BlphA7pARFbhM0Kkq81LOyq81LOHwOoJVO7iJKqOxiJRDOWiJ4JOAiJ/rOqiJM:W7ZhA7pApM21LOA1LO2c6b25gc6b25uG

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  27a6b4d0ff4ae21591b27540354ebb05d6a646a445514df8db3dab0714f10f5d
- Size
  
  46KB
- MD5
  
  ade202a05c086fc28953ad525d4cade8
- SHA1
  
  931a0e2fdd04bc0cd9e3fa28b39db5c000dc39dc
- SHA256
  
  27a6b4d0ff4ae21591b27540354ebb05d6a646a445514df8db3dab0714f10f5d
- SHA512
  
  a2da6a0fe72dad9c4a7ed9db51925b75685f80ae542df630e6077d740aa17efb35989c0acdeaa434f9e2522a42faf7c96c730fa7d5739303e3c884eff32aed77
- SSDEEP
  
  768:W7BlphA7pARFbhM0Kkq81LOyq81LOHwOoJVO7iJKqOxiJRDOWiJ4JOAiJ/rOqiJM:W7ZhA7pApM21LOA1LO2c6b25gc6b25uG
Score

9^/10

discovery ransomware
- Renames multiple (3777) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware