a603c9078e7f08fd0d82a76dba7b0d29c70fcf089488849616a04b756da6287c | Triage

Sharing

General

Target

a603c9078e7f08fd0d82a76dba7b0d29c70fcf089488849616a04b756da6287c
Size

40KB
Sample

240819-af5y5sshjb
MD5

8250288b5fb7d0e390aa6a40dfd86452
SHA1

89e0ca56c8f4f0f595e4bf906d3c898d2f4e0019
SHA256

a603c9078e7f08fd0d82a76dba7b0d29c70fcf089488849616a04b756da6287c
SHA512

555a3a2dd71a4602904b2c9f5a52ace3e70a9d33868eeab36284624225a92f316adf6209a43af2267981311d3b00414a0fcb003e498347d83bbf13c182585e7e
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFjqAJLOqAJLP:W7ZppApBULcfpHLcfpyDY

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  a603c9078e7f08fd0d82a76dba7b0d29c70fcf089488849616a04b756da6287c
- Size
  
  40KB
- MD5
  
  8250288b5fb7d0e390aa6a40dfd86452
- SHA1
  
  89e0ca56c8f4f0f595e4bf906d3c898d2f4e0019
- SHA256
  
  a603c9078e7f08fd0d82a76dba7b0d29c70fcf089488849616a04b756da6287c
- SHA512
  
  555a3a2dd71a4602904b2c9f5a52ace3e70a9d33868eeab36284624225a92f316adf6209a43af2267981311d3b00414a0fcb003e498347d83bbf13c182585e7e
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFjqAJLOqAJLP:W7ZppApBULcfpHLcfpyDY
Score

9^/10

discovery ransomware
- Renames multiple (3788) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware