2279a41b5b4dd29bb9afe6d4796d1544608ec2e6c58a8c551ca3fd92a234ef9c | Triage

Sharing

General

Target

2279a41b5b4dd29bb9afe6d4796d1544608ec2e6c58a8c551ca3fd92a234ef9c
Size

42KB
Sample

240911-yc9pxszblb
MD5

1769d9439981587bb5fc5319a01298a8
SHA1

24444d3530ebf1f46d37bf76e8d007f60512186d
SHA256

2279a41b5b4dd29bb9afe6d4796d1544608ec2e6c58a8c551ca3fd92a234ef9c
SHA512

aec97899bdb86b9a5cb0d6f087d0f7816e7949a05a2b5a349f1b1fd44a697de8059caaed60c747033f86cec5b2a6d24a1b5d1fc3c1ba9b1153b0fbbade4e4c47
SSDEEP

384:GBt7Br5xjL9AgA71FbhvuNBNQFrs0AqAJwO1AqAJwOf0VyjVyt:W7BlpppARFbhHFoqAJwBqAJw1VyjVyt

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  2279a41b5b4dd29bb9afe6d4796d1544608ec2e6c58a8c551ca3fd92a234ef9c
- Size
  
  42KB
- MD5
  
  1769d9439981587bb5fc5319a01298a8
- SHA1
  
  24444d3530ebf1f46d37bf76e8d007f60512186d
- SHA256
  
  2279a41b5b4dd29bb9afe6d4796d1544608ec2e6c58a8c551ca3fd92a234ef9c
- SHA512
  
  aec97899bdb86b9a5cb0d6f087d0f7816e7949a05a2b5a349f1b1fd44a697de8059caaed60c747033f86cec5b2a6d24a1b5d1fc3c1ba9b1153b0fbbade4e4c47
- SSDEEP
  
  384:GBt7Br5xjL9AgA71FbhvuNBNQFrs0AqAJwO1AqAJwOf0VyjVyt:W7BlpppARFbhHFoqAJwBqAJw1VyjVyt
Score

9^/10

discovery ransomware
- Renames multiple (3727) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware