9782bcb3408914adf07ff39f5f94e4c557561e68ea2415e086425a5567dfc709 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9782bcb3408914adf07ff39f5f94e4c557561e68ea2415e086425a5567dfc709
Size

50KB
Sample

240811-angxaazfjh
MD5

0ce423483bb4ce745b106e6cbb6f0a6a
SHA1

471706b4428d2095963d9fa48691e987ed2f30af
SHA256

9782bcb3408914adf07ff39f5f94e4c557561e68ea2415e086425a5567dfc709
SHA512

06b2b30a68d402d650075dea535bb204d3b2dca40ae2cf5b39eac5c385f2af80d406b73440e960f44b60cc6e35bb5d138c8a4141d0b292546f24ec4ab2d3e1a7
SSDEEP

384:GBt7Br5xjLvassAgA71FbhvgqHqMjL4jLS/3MMf/3MMy0U0czyKbNzzyKbN4EURi:W7Blp2sspARFbh5YSfffynfWK9WKhhB

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  9782bcb3408914adf07ff39f5f94e4c557561e68ea2415e086425a5567dfc709
- Size
  
  50KB
- MD5
  
  0ce423483bb4ce745b106e6cbb6f0a6a
- SHA1
  
  471706b4428d2095963d9fa48691e987ed2f30af
- SHA256
  
  9782bcb3408914adf07ff39f5f94e4c557561e68ea2415e086425a5567dfc709
- SHA512
  
  06b2b30a68d402d650075dea535bb204d3b2dca40ae2cf5b39eac5c385f2af80d406b73440e960f44b60cc6e35bb5d138c8a4141d0b292546f24ec4ab2d3e1a7
- SSDEEP
  
  384:GBt7Br5xjLvassAgA71FbhvgqHqMjL4jLS/3MMf/3MMy0U0czyKbNzzyKbN4EURi:W7Blp2sspARFbh5YSfffynfWK9WKhhB
Score

9^/10

discovery ransomware
- Renames multiple (702) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware