24753251e130fb6ea48e9921bf8698b985c9754981bb3d1e992ac917b3557a19 | Triage

Sharing

General

Target

24753251e130fb6ea48e9921bf8698b985c9754981bb3d1e992ac917b3557a19
Size

169KB
Sample

240913-yh5m6avfmr
MD5

0bf0dc5cc56e511eb17b57727ade797b
SHA1

399edd9663bbc71877fcd644a42fcb5f976e4cad
SHA256

24753251e130fb6ea48e9921bf8698b985c9754981bb3d1e992ac917b3557a19
SHA512

0e3b16be59e27e54d5a3d46036a1e4088d93fdc0741319e3a5014aafcb537e833f9508dd52b7f7481e5936454792fa724ce12a0bc3ff6dafc0f63524c6fa367d
SSDEEP

3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFMEhLfyBtR:PqFh2Ie+eyEuFF25e+eFL

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  24753251e130fb6ea48e9921bf8698b985c9754981bb3d1e992ac917b3557a19
- Size
  
  169KB
- MD5
  
  0bf0dc5cc56e511eb17b57727ade797b
- SHA1
  
  399edd9663bbc71877fcd644a42fcb5f976e4cad
- SHA256
  
  24753251e130fb6ea48e9921bf8698b985c9754981bb3d1e992ac917b3557a19
- SHA512
  
  0e3b16be59e27e54d5a3d46036a1e4088d93fdc0741319e3a5014aafcb537e833f9508dd52b7f7481e5936454792fa724ce12a0bc3ff6dafc0f63524c6fa367d
- SSDEEP
  
  3072:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFMEhLfyBtR:PqFh2Ie+eyEuFF25e+eFL
Score

9^/10

discovery ransomware
- Renames multiple (3438) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware