4e2ba6c86c930b377d8d5093dd43de0c5d6ffa54e1a83e31861a864b1a72a798 | Triage

Sharing

General

Target

48a2c50a88ee6bff17e1663148953d80N
Size

50KB
Sample

240826-dfp5ga1crf
MD5

48a2c50a88ee6bff17e1663148953d80
SHA1

6b7e7ed2aafd14a1de9ea50f93aaff7312025408
SHA256

4e2ba6c86c930b377d8d5093dd43de0c5d6ffa54e1a83e31861a864b1a72a798
SHA512

32bf8c2b2961d58295bdfb929717f144f44081ecdc561ec7d5979b1f6397cd61673107e976f531ea34e3f335dfc2e50321d02c99e4a9f6a8695f2b491e9fefb5
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFXpK5c5khwRDThwRDwfZfarc:W7ZppApBULcfpHLcfpyDA6swXwXrc

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  48a2c50a88ee6bff17e1663148953d80N
- Size
  
  50KB
- MD5
  
  48a2c50a88ee6bff17e1663148953d80
- SHA1
  
  6b7e7ed2aafd14a1de9ea50f93aaff7312025408
- SHA256
  
  4e2ba6c86c930b377d8d5093dd43de0c5d6ffa54e1a83e31861a864b1a72a798
- SHA512
  
  32bf8c2b2961d58295bdfb929717f144f44081ecdc561ec7d5979b1f6397cd61673107e976f531ea34e3f335dfc2e50321d02c99e4a9f6a8695f2b491e9fefb5
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFXpK5c5khwRDThwRDwfZfarc:W7ZppApBULcfpHLcfpyDA6swXwXrc
Score

9^/10

discovery ransomware
- Renames multiple (3250) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware