649de38e2a3cb2f50b478d8c91e2d609f3e736258b648ac5a4b5d319c994ff1f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a8e3b970b8dfa0a0a3a210059052e2b0N
Size

62KB
Sample

240913-2bcwcascrr
MD5

a8e3b970b8dfa0a0a3a210059052e2b0
SHA1

70fb42ed9451be8d155799349aa02edb794e2d1c
SHA256

649de38e2a3cb2f50b478d8c91e2d609f3e736258b648ac5a4b5d319c994ff1f
SHA512

8c4159ff99ec5516153fcfa896f9720a13da3c1896ea44b3a052dcf9f9bd2f6abfd92a4182ce41637d97792216cc2125a4c1a31a22c8c9aa69b514aaf078ff22
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFjqAJLOqAJLMdrBdr1Kf:W7ZppApBULcfpHLcfpyDlKf

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  a8e3b970b8dfa0a0a3a210059052e2b0N
- Size
  
  62KB
- MD5
  
  a8e3b970b8dfa0a0a3a210059052e2b0
- SHA1
  
  70fb42ed9451be8d155799349aa02edb794e2d1c
- SHA256
  
  649de38e2a3cb2f50b478d8c91e2d609f3e736258b648ac5a4b5d319c994ff1f
- SHA512
  
  8c4159ff99ec5516153fcfa896f9720a13da3c1896ea44b3a052dcf9f9bd2f6abfd92a4182ce41637d97792216cc2125a4c1a31a22c8c9aa69b514aaf078ff22
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFjqAJLOqAJLMdrBdr1Kf:W7ZppApBULcfpHLcfpyDlKf
Score

9^/10

discovery ransomware
- Renames multiple (3255) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware