4943cfe4ad8c088c9d5ab0f85804b343564446b7264a6a4b599468f7c02a81f9 | Triage

Sharing

General

Target

4943cfe4ad8c088c9d5ab0f85804b343564446b7264a6a4b599468f7c02a81f9
Size

44KB
Sample

240813-y4herayenj
MD5

6c5b6359d4c4955836783ebc2f11467b
SHA1

bf83d2df53d2790699701d52a9ac229d1babdbaa
SHA256

4943cfe4ad8c088c9d5ab0f85804b343564446b7264a6a4b599468f7c02a81f9
SHA512

e888499c89a059a5a7dbda50f6fe2faa86fbacdc3452b205797f649e87a24be015b8e0ee4b30ce46965f999dcc583831d3135c083d069000726dd56e15cc9529
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfproFNF2B5dB5m:W7ZppApBULcfpHLcfpyD2jdjm

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  4943cfe4ad8c088c9d5ab0f85804b343564446b7264a6a4b599468f7c02a81f9
- Size
  
  44KB
- MD5
  
  6c5b6359d4c4955836783ebc2f11467b
- SHA1
  
  bf83d2df53d2790699701d52a9ac229d1babdbaa
- SHA256
  
  4943cfe4ad8c088c9d5ab0f85804b343564446b7264a6a4b599468f7c02a81f9
- SHA512
  
  e888499c89a059a5a7dbda50f6fe2faa86fbacdc3452b205797f649e87a24be015b8e0ee4b30ce46965f999dcc583831d3135c083d069000726dd56e15cc9529
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfproFNF2B5dB5m:W7ZppApBULcfpHLcfpyD2jdjm
Score

9^/10

discovery ransomware
- Renames multiple (3818) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware