5137b070039f2800b0ab1d8d86ed9f5cec3eb4cd56b3eea46f5ba7a84abe2cc9 | Triage

Sharing

General

Target

5137b070039f2800b0ab1d8d86ed9f5cec3eb4cd56b3eea46f5ba7a84abe2cc9
Size

64KB
Sample

240825-1n4zxswhrb
MD5

1151eeb0b6127be5739f96b907bc92aa
SHA1

5d356583a8387b6b023aef73c2749877f7d3d855
SHA256

5137b070039f2800b0ab1d8d86ed9f5cec3eb4cd56b3eea46f5ba7a84abe2cc9
SHA512

eadca165853acb5ff522be27c531c4cd2e64591ad827a7e903761c51f54ff36bf4b7c028d317f6e33eac4dd9e9719c3710ebca1d696203ad42ca235222bf3592
SSDEEP

1536:W7ZppApryb81KP2awclvmxaKP2awclvmxv:6pWpi8wP2awclvmxrP2awclvmxv

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  5137b070039f2800b0ab1d8d86ed9f5cec3eb4cd56b3eea46f5ba7a84abe2cc9
- Size
  
  64KB
- MD5
  
  1151eeb0b6127be5739f96b907bc92aa
- SHA1
  
  5d356583a8387b6b023aef73c2749877f7d3d855
- SHA256
  
  5137b070039f2800b0ab1d8d86ed9f5cec3eb4cd56b3eea46f5ba7a84abe2cc9
- SHA512
  
  eadca165853acb5ff522be27c531c4cd2e64591ad827a7e903761c51f54ff36bf4b7c028d317f6e33eac4dd9e9719c3710ebca1d696203ad42ca235222bf3592
- SSDEEP
  
  1536:W7ZppApryb81KP2awclvmxaKP2awclvmxv:6pWpi8wP2awclvmxrP2awclvmxv
Score

9^/10

discovery ransomware
- Renames multiple (3528) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware