4934363132e4f1abac8ca82f4fe8b4efeb9161ab5a7c3d66372c7e123ae3a68b | Triage

Sharing

General

Target

4934363132e4f1abac8ca82f4fe8b4efeb9161ab5a7c3d66372c7e123ae3a68b
Size

58KB
Sample

240818-znkevatdkf
MD5

6d5f347b5e0b76827a8a8778be9f1074
SHA1

ba0a7c1aeeb57ef1244b5b165969f02a69bed937
SHA256

4934363132e4f1abac8ca82f4fe8b4efeb9161ab5a7c3d66372c7e123ae3a68b
SHA512

d5195370519a5805f11bc5c7338711a5a8aec390c05ded8199ba5d5f8274825c799bdadc269961b3663adc476377af97850b96b4f2bbdca704e8755de2e1265a
SSDEEP

768:/7BlpQpARFbhn54fmiy+3BVr54fmiy+3BV6nE101IK8WKnFIMK8WKnFIo:/7ZQpApmi6nuKNKnF3KNKnFp

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  4934363132e4f1abac8ca82f4fe8b4efeb9161ab5a7c3d66372c7e123ae3a68b
- Size
  
  58KB
- MD5
  
  6d5f347b5e0b76827a8a8778be9f1074
- SHA1
  
  ba0a7c1aeeb57ef1244b5b165969f02a69bed937
- SHA256
  
  4934363132e4f1abac8ca82f4fe8b4efeb9161ab5a7c3d66372c7e123ae3a68b
- SHA512
  
  d5195370519a5805f11bc5c7338711a5a8aec390c05ded8199ba5d5f8274825c799bdadc269961b3663adc476377af97850b96b4f2bbdca704e8755de2e1265a
- SSDEEP
  
  768:/7BlpQpARFbhn54fmiy+3BVr54fmiy+3BV6nE101IK8WKnFIMK8WKnFIo:/7ZQpApmi6nuKNKnF3KNKnFp
Score

9^/10

discovery ransomware
- Renames multiple (3754) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware