b350b932d0556f66d3baf46f3af4056ee4f2c368e4c24e08c8b815523d3242c6 | Triage

Sharing

General

Target

b350b932d0556f66d3baf46f3af4056ee4f2c368e4c24e08c8b815523d3242c6
Size

64KB
Sample

240901-b5na3ayalb
MD5

4eb46abdd112f067937cd55627916ae3
SHA1

f1f965c28b705e8ff4ed6135edc2f6025be9a860
SHA256

b350b932d0556f66d3baf46f3af4056ee4f2c368e4c24e08c8b815523d3242c6
SHA512

15c35e5fa0cf2d9e52fc753faaa4e284c0e460f584f42bd834db9f9676cbe673f8d406e2a3103721dea4f7f12e944be4b2148b7e5d28e49a909780afe002813a
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfpVF/MF/3Nw/Nwk0cEMdV8IEMdV85/g:W7ZppApBULcfpHLcfpX2/Nw/NwmxD

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  b350b932d0556f66d3baf46f3af4056ee4f2c368e4c24e08c8b815523d3242c6
- Size
  
  64KB
- MD5
  
  4eb46abdd112f067937cd55627916ae3
- SHA1
  
  f1f965c28b705e8ff4ed6135edc2f6025be9a860
- SHA256
  
  b350b932d0556f66d3baf46f3af4056ee4f2c368e4c24e08c8b815523d3242c6
- SHA512
  
  15c35e5fa0cf2d9e52fc753faaa4e284c0e460f584f42bd834db9f9676cbe673f8d406e2a3103721dea4f7f12e944be4b2148b7e5d28e49a909780afe002813a
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfpVF/MF/3Nw/Nwk0cEMdV8IEMdV85/g:W7ZppApBULcfpHLcfpX2/Nw/NwmxD
Score

9^/10

discovery ransomware
- Renames multiple (3433) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware