1ea878107c4811573305907573d45a5d61cdc6d52d779dde4024122bb4776a27 | Triage

Sharing

General

Target

1ea878107c4811573305907573d45a5d61cdc6d52d779dde4024122bb4776a27
Size

74KB
Sample

240912-ypv3assbmc
MD5

9c2c4b45a9b4c4e06c53c314faf715cd
SHA1

2c1350442c107c52d078587f46d88cc3606502ca
SHA256

1ea878107c4811573305907573d45a5d61cdc6d52d779dde4024122bb4776a27
SHA512

4d21d7ea1a5122ab54f38e078e3af3b229e19a051c60ad6c927fc031c1fec756b8d7fa42ead2548b31be8769ba8eb7842382f9199e3bca1b8253a17d012ccbd6
SSDEEP

1536:W7ZhA7dAZ1++PJHJXA/OsIZfzc3/Q8+CtlYSDL:6e76mQSostXDL

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  1ea878107c4811573305907573d45a5d61cdc6d52d779dde4024122bb4776a27
- Size
  
  74KB
- MD5
  
  9c2c4b45a9b4c4e06c53c314faf715cd
- SHA1
  
  2c1350442c107c52d078587f46d88cc3606502ca
- SHA256
  
  1ea878107c4811573305907573d45a5d61cdc6d52d779dde4024122bb4776a27
- SHA512
  
  4d21d7ea1a5122ab54f38e078e3af3b229e19a051c60ad6c927fc031c1fec756b8d7fa42ead2548b31be8769ba8eb7842382f9199e3bca1b8253a17d012ccbd6
- SSDEEP
  
  1536:W7ZhA7dAZ1++PJHJXA/OsIZfzc3/Q8+CtlYSDL:6e76mQSostXDL
Score

9^/10

discovery ransomware
- Renames multiple (3481) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware