4eee14485515d5919356395f35571ec3612fc19149e1ff1bad7023197f7b3392 | Triage

Sharing

General

Target

4eee14485515d5919356395f35571ec3612fc19149e1ff1bad7023197f7b3392
Size

91KB
Sample

240811-zvxzhsxhmr
MD5

0cf873538df1fe5f5075105c3b02729b
SHA1

db8a49069fbd76b46daf5c54c4b6123540014562
SHA256

4eee14485515d5919356395f35571ec3612fc19149e1ff1bad7023197f7b3392
SHA512

ca2f5b2da9b11a4f629395325c53eb4aeb3e5e5c7b91612ff246b1b9e67b450da0291feddee99bf8454b0c1c162f44768af2f4b2b43db41bdc24d45318c8c535
SSDEEP

1536:W7Z2sspApGg7bobSM+t58qKcAK+j4nI4VfNgZ11PED4gJQeAAUZa0EzOMy:62ssWpGgrM+t58qKcAK+j4n7ByeFUF

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  4eee14485515d5919356395f35571ec3612fc19149e1ff1bad7023197f7b3392
- Size
  
  91KB
- MD5
  
  0cf873538df1fe5f5075105c3b02729b
- SHA1
  
  db8a49069fbd76b46daf5c54c4b6123540014562
- SHA256
  
  4eee14485515d5919356395f35571ec3612fc19149e1ff1bad7023197f7b3392
- SHA512
  
  ca2f5b2da9b11a4f629395325c53eb4aeb3e5e5c7b91612ff246b1b9e67b450da0291feddee99bf8454b0c1c162f44768af2f4b2b43db41bdc24d45318c8c535
- SSDEEP
  
  1536:W7Z2sspApGg7bobSM+t58qKcAK+j4nI4VfNgZ11PED4gJQeAAUZa0EzOMy:62ssWpGgrM+t58qKcAK+j4n7ByeFUF
Score

9^/10

discovery ransomware
- Renames multiple (3455) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware