0a6527e8b64bca22cc205e2953242331f9150cde7e51acd691d4aa9e3c22a506 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a6527e8b64bca22cc205e2953242331f9150cde7e51acd691d4aa9e3c22a506
Size

89KB
Sample

240817-xc8xys1amh
MD5

2113c9b23de275bd51edcc621818efda
SHA1

503f67950e89083b899fa2f8006402a6d560ac0b
SHA256

0a6527e8b64bca22cc205e2953242331f9150cde7e51acd691d4aa9e3c22a506
SHA512

37b056ce81d78d2ee4fa386dbba5cf544ff889c82718424e5d6bf5a3c65bd378bc4eecc573f5777aae3797ec6e12e0512ca5df774306ff6ffa915e55e50d14cd
SSDEEP

1536:W7ZppApUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFsAcEhi:6pWpUFpEhLfyBtPf50FWkFpPDze/qFs/

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  0a6527e8b64bca22cc205e2953242331f9150cde7e51acd691d4aa9e3c22a506
- Size
  
  89KB
- MD5
  
  2113c9b23de275bd51edcc621818efda
- SHA1
  
  503f67950e89083b899fa2f8006402a6d560ac0b
- SHA256
  
  0a6527e8b64bca22cc205e2953242331f9150cde7e51acd691d4aa9e3c22a506
- SHA512
  
  37b056ce81d78d2ee4fa386dbba5cf544ff889c82718424e5d6bf5a3c65bd378bc4eecc573f5777aae3797ec6e12e0512ca5df774306ff6ffa915e55e50d14cd
- SSDEEP
  
  1536:W7ZppApUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFsAcEhi:6pWpUFpEhLfyBtPf50FWkFpPDze/qFs/
Score

9^/10

discovery ransomware
- Renames multiple (824) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware