29d768de8ff824e24ddc265b79a6ff1e6860dc9678e2fb3cb9050ff3334768ac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29d768de8ff824e24ddc265b79a6ff1e6860dc9678e2fb3cb9050ff3334768ac
Size

44KB
Sample

240810-ymfjtsvgjl
MD5

df4fe2be94de430970bdbd5a89300e71
SHA1

99ecfed6fa6801fad507282f488e7fb536bb8cdc
SHA256

29d768de8ff824e24ddc265b79a6ff1e6860dc9678e2fb3cb9050ff3334768ac
SHA512

4d5238c6f483285fc36d1c61e44d5554d7ce6f854b6d59c2251cb93a8edf953c7b786e24c308726e0fbee97298aa048ac4a8486c836704c6be3aabbb0210f35d
SSDEEP

384:GBt7Br5xjLdbAAgA71FbhvU8g0U0fL+jnK1q1K1qflYxlYnbdUdK:W7Blp+pARFbhBgnKL+LK1KK1RAbSs

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  29d768de8ff824e24ddc265b79a6ff1e6860dc9678e2fb3cb9050ff3334768ac
- Size
  
  44KB
- MD5
  
  df4fe2be94de430970bdbd5a89300e71
- SHA1
  
  99ecfed6fa6801fad507282f488e7fb536bb8cdc
- SHA256
  
  29d768de8ff824e24ddc265b79a6ff1e6860dc9678e2fb3cb9050ff3334768ac
- SHA512
  
  4d5238c6f483285fc36d1c61e44d5554d7ce6f854b6d59c2251cb93a8edf953c7b786e24c308726e0fbee97298aa048ac4a8486c836704c6be3aabbb0210f35d
- SSDEEP
  
  384:GBt7Br5xjLdbAAgA71FbhvU8g0U0fL+jnK1q1K1qflYxlYnbdUdK:W7Blp+pARFbhBgnKL+LK1KK1RAbSs
Score

9^/10

discovery ransomware
- Renames multiple (3773) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware