e64a3dbebcc3a258c6b0bcec05c542e2047dea7616ec1c61b85401e6bdb46632 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e64a3dbebcc3a258c6b0bcec05c542e2047dea7616ec1c61b85401e6bdb46632
Size

42KB
Sample

240901-ez95es1fkq
MD5

5a498910765185915b71c3e0fc233a0c
SHA1

476c954e804c239786407a5a4a585728fc3f2750
SHA256

e64a3dbebcc3a258c6b0bcec05c542e2047dea7616ec1c61b85401e6bdb46632
SHA512

548e71cbe408ac1873e6851f8a3a5c96e49c2681a430f89074491e19aa9d7cecdcb3efb761950cc7eb30c8ba4cda1ef732c0ed9fcd14d4eaffa1479c0409c80e
SSDEEP

768:W7BlphA7pARFbhM0Kkq81LOyq81LObC8p8f+Y:W7ZhA7pApM21LOA1LO8

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  e64a3dbebcc3a258c6b0bcec05c542e2047dea7616ec1c61b85401e6bdb46632
- Size
  
  42KB
- MD5
  
  5a498910765185915b71c3e0fc233a0c
- SHA1
  
  476c954e804c239786407a5a4a585728fc3f2750
- SHA256
  
  e64a3dbebcc3a258c6b0bcec05c542e2047dea7616ec1c61b85401e6bdb46632
- SHA512
  
  548e71cbe408ac1873e6851f8a3a5c96e49c2681a430f89074491e19aa9d7cecdcb3efb761950cc7eb30c8ba4cda1ef732c0ed9fcd14d4eaffa1479c0409c80e
- SSDEEP
  
  768:W7BlphA7pARFbhM0Kkq81LOyq81LObC8p8f+Y:W7ZhA7pApM21LOA1LO8
Score

9^/10

discovery ransomware
- Renames multiple (3813) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware