20333299645796f3275124d8d6379a6b8395ff9e8d5d69f84e3d8cff5e7413e5 | Triage

Sharing

General

Target

20333299645796f3275124d8d6379a6b8395ff9e8d5d69f84e3d8cff5e7413e5
Size

43KB
Sample

240817-yhd57starf
MD5

fc27b67e2b3982042235f18d277fecbb
SHA1

834c4af34d1f6a944c79418f453ca077f1b3c3bc
SHA256

20333299645796f3275124d8d6379a6b8395ff9e8d5d69f84e3d8cff5e7413e5
SHA512

eb2e39f7ae0027404bd6087103c552e8a196f2748f0ae270e7b0f1d70e1efc90d4f973da2f3a60982f4e700ca7f5a3c35d8747d6a2e30b7292f0b8522b272f92
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFjqAJLOqAJLy:W7ZppApBULcfpHLcfpyDN

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  20333299645796f3275124d8d6379a6b8395ff9e8d5d69f84e3d8cff5e7413e5
- Size
  
  43KB
- MD5
  
  fc27b67e2b3982042235f18d277fecbb
- SHA1
  
  834c4af34d1f6a944c79418f453ca077f1b3c3bc
- SHA256
  
  20333299645796f3275124d8d6379a6b8395ff9e8d5d69f84e3d8cff5e7413e5
- SHA512
  
  eb2e39f7ae0027404bd6087103c552e8a196f2748f0ae270e7b0f1d70e1efc90d4f973da2f3a60982f4e700ca7f5a3c35d8747d6a2e30b7292f0b8522b272f92
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFjqAJLOqAJLy:W7ZppApBULcfpHLcfpyDN
Score

9^/10

discovery ransomware
- Renames multiple (3809) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware