1628fe1029ff235066c0a81a25e0359530f2fdbb92a953aef7dc5ef70e93b640 | Triage

Sharing

General

Target

1628fe1029ff235066c0a81a25e0359530f2fdbb92a953aef7dc5ef70e93b640
Size

42KB
Sample

240817-xx2dlssane
MD5

b75ed075f1449409a7ff5cf3044a5fe1
SHA1

535dddffb5b2c429963d0040cb5ee8225ceb763b
SHA256

1628fe1029ff235066c0a81a25e0359530f2fdbb92a953aef7dc5ef70e93b640
SHA512

7dc92977706049c04277c70765384042cf5e890b2cb9bcc65ca6b9066f1906bc8ba21f1b521577c67172c2146b4825f39f423ea547f29c2471559d5c813b0532
SSDEEP

384:yBs7Br5xjL8AgA71FbhvBfepj3cfepj3KtLJilqGelqGk:/7BlpQpARFbhq1KtGFGk

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  1628fe1029ff235066c0a81a25e0359530f2fdbb92a953aef7dc5ef70e93b640
- Size
  
  42KB
- MD5
  
  b75ed075f1449409a7ff5cf3044a5fe1
- SHA1
  
  535dddffb5b2c429963d0040cb5ee8225ceb763b
- SHA256
  
  1628fe1029ff235066c0a81a25e0359530f2fdbb92a953aef7dc5ef70e93b640
- SHA512
  
  7dc92977706049c04277c70765384042cf5e890b2cb9bcc65ca6b9066f1906bc8ba21f1b521577c67172c2146b4825f39f423ea547f29c2471559d5c813b0532
- SSDEEP
  
  384:yBs7Br5xjL8AgA71FbhvBfepj3cfepj3KtLJilqGelqGk:/7BlpQpARFbhq1KtGFGk
Score

9^/10

discovery ransomware
- Renames multiple (1112) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware