dbedae2e6e60dc17dd64326f2b8ec6d5c5e6e0a642a0431596ba520e2179e7a4 | Triage

Sharing

General

Target

dbedae2e6e60dc17dd64326f2b8ec6d5c5e6e0a642a0431596ba520e2179e7a4
Size

80KB
Sample

240911-dstcna1bmc
MD5

79f9f24998ec553091ad4cd17e3ac98e
SHA1

0661bb3d3800b704a6f4b6e4bedb59a8611cc295
SHA256

dbedae2e6e60dc17dd64326f2b8ec6d5c5e6e0a642a0431596ba520e2179e7a4
SHA512

cfa2a43ac2af1b5abfde0694f6237d659d8bd72c232cf0c024e939cd98f58d7c4f6b87f32739a8e51b625cae463e078a02d05ec4b3270a842112c936d61a5af4
SSDEEP

768:/7BlpQpARFbhIYJIJDYJIJPfFpsJcFfFpsJcC+3mC+3meDAfABJ6fABJwEXBCNW+:/7ZQpApze+eJfFpsJOfFpsJ5D8Q/NW

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  dbedae2e6e60dc17dd64326f2b8ec6d5c5e6e0a642a0431596ba520e2179e7a4
- Size
  
  80KB
- MD5
  
  79f9f24998ec553091ad4cd17e3ac98e
- SHA1
  
  0661bb3d3800b704a6f4b6e4bedb59a8611cc295
- SHA256
  
  dbedae2e6e60dc17dd64326f2b8ec6d5c5e6e0a642a0431596ba520e2179e7a4
- SHA512
  
  cfa2a43ac2af1b5abfde0694f6237d659d8bd72c232cf0c024e939cd98f58d7c4f6b87f32739a8e51b625cae463e078a02d05ec4b3270a842112c936d61a5af4
- SSDEEP
  
  768:/7BlpQpARFbhIYJIJDYJIJPfFpsJcFfFpsJcC+3mC+3meDAfABJ6fABJwEXBCNW+:/7ZQpApze+eJfFpsJOfFpsJ5D8Q/NW
Score

9^/10

discovery ransomware
- Renames multiple (3515) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware