e63913910606dfe4a9b2bfd872902141b24cde316fde3b0954a7c4003e90bb25 | Triage

Sharing

General

Target

e63913910606dfe4a9b2bfd872902141b24cde316fde3b0954a7c4003e90bb25
Size

106KB
Sample

240825-hcnjpazenh
MD5

54cb13599d967c59ca26d64ba88dc515
SHA1

a7f68a9bb1538d3af1e5581b68479d6cdaaa3a0a
SHA256

e63913910606dfe4a9b2bfd872902141b24cde316fde3b0954a7c4003e90bb25
SHA512

d6ee789ccd537237ddbd9319380d2b4ed6f1bf38570e21449366350a54226e9b0e3efcff32c39491da56060c1fe3180eb9280bfd7711b9b89027681852c6b22a
SSDEEP

1536:W7ZhA7pApH9QHwtRF9ESWu0SWutlggalggEpVp+ESIXosbosz1i:6e7WpHIyRF9ESWu0SWuDmmSIjX8

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  e63913910606dfe4a9b2bfd872902141b24cde316fde3b0954a7c4003e90bb25
- Size
  
  106KB
- MD5
  
  54cb13599d967c59ca26d64ba88dc515
- SHA1
  
  a7f68a9bb1538d3af1e5581b68479d6cdaaa3a0a
- SHA256
  
  e63913910606dfe4a9b2bfd872902141b24cde316fde3b0954a7c4003e90bb25
- SHA512
  
  d6ee789ccd537237ddbd9319380d2b4ed6f1bf38570e21449366350a54226e9b0e3efcff32c39491da56060c1fe3180eb9280bfd7711b9b89027681852c6b22a
- SSDEEP
  
  1536:W7ZhA7pApH9QHwtRF9ESWu0SWutlggalggEpVp+ESIXosbosz1i:6e7WpHIyRF9ESWu0SWuDmmSIjX8
Score

9^/10

discovery ransomware
- Renames multiple (3443) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware