2bebd06099c03ff1bd0cfb4fd8c8d32a6158e01e6a9598049fd72c2e2d720eec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bebd06099c03ff1bd0cfb4fd8c8d32a6158e01e6a9598049fd72c2e2d720eec
Size

81KB
Sample

240816-zd8ppayhlm
MD5

83c98a342be3df1426d6e8f833571963
SHA1

a7298779c87eb59d059c1f65b1c3376ecb983c32
SHA256

2bebd06099c03ff1bd0cfb4fd8c8d32a6158e01e6a9598049fd72c2e2d720eec
SHA512

9c03bff4f40d434081b685587a4a43bb184d6ffcfaec93157ab2d989ec2c8798d64eb7f6c66f4c4e5db1c01d608b99bd5c19ab6fc62869c39e3b819f2426ebaf
SSDEEP

1536:W7ZhA7pApMaxB4b0CYJ97lEVqNR7Yge+ei:6e7WpMaxeb0CYJ97lEYNR73e+ei

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  2bebd06099c03ff1bd0cfb4fd8c8d32a6158e01e6a9598049fd72c2e2d720eec
- Size
  
  81KB
- MD5
  
  83c98a342be3df1426d6e8f833571963
- SHA1
  
  a7298779c87eb59d059c1f65b1c3376ecb983c32
- SHA256
  
  2bebd06099c03ff1bd0cfb4fd8c8d32a6158e01e6a9598049fd72c2e2d720eec
- SHA512
  
  9c03bff4f40d434081b685587a4a43bb184d6ffcfaec93157ab2d989ec2c8798d64eb7f6c66f4c4e5db1c01d608b99bd5c19ab6fc62869c39e3b819f2426ebaf
- SSDEEP
  
  1536:W7ZhA7pApMaxB4b0CYJ97lEVqNR7Yge+ei:6e7WpMaxeb0CYJ97lEYNR73e+ei
Score

9^/10

discovery ransomware
- Renames multiple (3655) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware