bdce59ea66b3e2f5a1cc7e962604c3ffe2809e14367958d896ad7bbe60244007 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bdce59ea66b3e2f5a1cc7e962604c3ffe2809e14367958d896ad7bbe60244007
Size

44KB
Sample

240818-eqgfraxejq
MD5

a9e5bb8196920c2d0dc2b370cb693f33
SHA1

40327f9447c8f50168b0691147415b863cd44f26
SHA256

bdce59ea66b3e2f5a1cc7e962604c3ffe2809e14367958d896ad7bbe60244007
SHA512

aa2684711fc382238c5b4c813421f2d82752e3f0f6d2ba0bee087894e68d7b0da9e9658ce037f3b3d7a0986b23a8c80dbe578c2e98de9a051ceeb05d1dea190e
SSDEEP

768:W7BlphA7pARFbhM0Kkq81LOyq81LOHwOoJVO7iJKqOxiJRDOWiJ4JOAiJ/rOqiJI:W7ZhA7pApM21LOA1LO2c6b25gc6b25uO

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  bdce59ea66b3e2f5a1cc7e962604c3ffe2809e14367958d896ad7bbe60244007
- Size
  
  44KB
- MD5
  
  a9e5bb8196920c2d0dc2b370cb693f33
- SHA1
  
  40327f9447c8f50168b0691147415b863cd44f26
- SHA256
  
  bdce59ea66b3e2f5a1cc7e962604c3ffe2809e14367958d896ad7bbe60244007
- SHA512
  
  aa2684711fc382238c5b4c813421f2d82752e3f0f6d2ba0bee087894e68d7b0da9e9658ce037f3b3d7a0986b23a8c80dbe578c2e98de9a051ceeb05d1dea190e
- SSDEEP
  
  768:W7BlphA7pARFbhM0Kkq81LOyq81LOHwOoJVO7iJKqOxiJRDOWiJ4JOAiJ/rOqiJI:W7ZhA7pApM21LOA1LO2c6b25gc6b25uO
Score

9^/10

discovery ransomware
- Renames multiple (3762) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware