bd5858856ae20a93a6d25277a7b987afde7f24f744a649489175171530db5be0 | Triage

Sharing

General

Target

bd5858856ae20a93a6d25277a7b987afde7f24f744a649489175171530db5be0
Size

93KB
Sample

240813-3wcxhswglk
MD5

c1b89eea3684fcfe040c9be9d0c16eaf
SHA1

a8a91808ca8acd485326ca03d0caf9357c6ac098
SHA256

bd5858856ae20a93a6d25277a7b987afde7f24f744a649489175171530db5be0
SHA512

cf44e168bd803f793bb60d984f2cbc177a00564d8872e0f8dac0b423d8f41b18958d23158e269db4509b2ede86d1462482e518821c4f3fac0ddffdec8d93b10e
SSDEEP

1536:W7ZDpApYbWjIoPyPoLzV7c6ShZQ4PN54PNPw:6DWp4Wy

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  bd5858856ae20a93a6d25277a7b987afde7f24f744a649489175171530db5be0
- Size
  
  93KB
- MD5
  
  c1b89eea3684fcfe040c9be9d0c16eaf
- SHA1
  
  a8a91808ca8acd485326ca03d0caf9357c6ac098
- SHA256
  
  bd5858856ae20a93a6d25277a7b987afde7f24f744a649489175171530db5be0
- SHA512
  
  cf44e168bd803f793bb60d984f2cbc177a00564d8872e0f8dac0b423d8f41b18958d23158e269db4509b2ede86d1462482e518821c4f3fac0ddffdec8d93b10e
- SSDEEP
  
  1536:W7ZDpApYbWjIoPyPoLzV7c6ShZQ4PN54PNPw:6DWp4Wy
Score

9^/10

discovery ransomware
- Renames multiple (3500) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware