5811b0f883035ce3741997e20aa13a33b43dec5db74c3b5af9438a493d64afdc | Triage

Sharing

General

Target

5811b0f883035ce3741997e20aa13a33b43dec5db74c3b5af9438a493d64afdc
Size

46KB
Sample

240902-1xzfssybkp
MD5

4efc7a9a2fe20a8005bc4f70c77626a9
SHA1

e90922fd75eec710bf89d2dcc6f7421e8d2e1698
SHA256

5811b0f883035ce3741997e20aa13a33b43dec5db74c3b5af9438a493d64afdc
SHA512

fff004d5f3140c6339590ce511441441918d8792f648afcd996e7b65415f57d3d7558b30cda9cf2a04e634279c854765b147c9e0060bdfb37dfdb883a746272c
SSDEEP

768:W7BlphA7pARFbhM0Kkq81LOyq81LOl6Sl5lsSsr+r+0XYXE:W7ZhA7pApM21LOA1LOl6vSsr+r+K+E

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  5811b0f883035ce3741997e20aa13a33b43dec5db74c3b5af9438a493d64afdc
- Size
  
  46KB
- MD5
  
  4efc7a9a2fe20a8005bc4f70c77626a9
- SHA1
  
  e90922fd75eec710bf89d2dcc6f7421e8d2e1698
- SHA256
  
  5811b0f883035ce3741997e20aa13a33b43dec5db74c3b5af9438a493d64afdc
- SHA512
  
  fff004d5f3140c6339590ce511441441918d8792f648afcd996e7b65415f57d3d7558b30cda9cf2a04e634279c854765b147c9e0060bdfb37dfdb883a746272c
- SSDEEP
  
  768:W7BlphA7pARFbhM0Kkq81LOyq81LOl6Sl5lsSsr+r+0XYXE:W7ZhA7pApM21LOA1LOl6vSsr+r+K+E
Score

9^/10

discovery ransomware
- Renames multiple (3793) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware