b4c4a7c4e7e0ba729626186329c2f0aecbdb9fe2b466c98ca405d32f38c7dd59 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4c4a7c4e7e0ba729626186329c2f0aecbdb9fe2b466c98ca405d32f38c7dd59
Size

52KB
Sample

240826-cfyk6szhkr
MD5

489403592fc3ab97f17ca0c03a7e728f
SHA1

2b650aafc5dc09787e4a451c1f14a6815704c7dc
SHA256

b4c4a7c4e7e0ba729626186329c2f0aecbdb9fe2b466c98ca405d32f38c7dd59
SHA512

33c47ac30e2a3fb74f974f979a8fd25ff83c6f52c87b3440e0ff3af22147f294fe4f95b603871c476c0ddcf1946704a46ce926ec3bc240dd974d445c6796053e
SSDEEP

768:W7Blp+pARFbhBgnKLMWK9WKD2N2QppjzjC:W7Z+pAp2nKLRKIKqoO32

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  b4c4a7c4e7e0ba729626186329c2f0aecbdb9fe2b466c98ca405d32f38c7dd59
- Size
  
  52KB
- MD5
  
  489403592fc3ab97f17ca0c03a7e728f
- SHA1
  
  2b650aafc5dc09787e4a451c1f14a6815704c7dc
- SHA256
  
  b4c4a7c4e7e0ba729626186329c2f0aecbdb9fe2b466c98ca405d32f38c7dd59
- SHA512
  
  33c47ac30e2a3fb74f974f979a8fd25ff83c6f52c87b3440e0ff3af22147f294fe4f95b603871c476c0ddcf1946704a46ce926ec3bc240dd974d445c6796053e
- SSDEEP
  
  768:W7Blp+pARFbhBgnKLMWK9WKD2N2QppjzjC:W7Z+pAp2nKLRKIKqoO32
Score

9^/10

discovery ransomware
- Renames multiple (3699) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware