cd7ad63b48a919333bd5ca416babfe632cbe5b1d34f4fbf5819df39c98ad32e2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49f4116b4956d3ba3b072c03fae3f380N
Size

75KB
Sample

240914-tly8bstapg
MD5

49f4116b4956d3ba3b072c03fae3f380
SHA1

444a58e23855894e83f7a607d45a4b0f2c7ac1dd
SHA256

cd7ad63b48a919333bd5ca416babfe632cbe5b1d34f4fbf5819df39c98ad32e2
SHA512

23482d344c53cf78461d926b20ae7130295ed3e62ea775193c3860a7df9ecf6fa5ecdc12ba318e2a7b0e7042055d45311bea13dfb362fd12a4990a0b1da72323
SSDEEP

1536:W7ZDpApYbVK4vx4PN54PN4OHepOHeZS1aKa4aKa5:6DWp7W4

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  49f4116b4956d3ba3b072c03fae3f380N
- Size
  
  75KB
- MD5
  
  49f4116b4956d3ba3b072c03fae3f380
- SHA1
  
  444a58e23855894e83f7a607d45a4b0f2c7ac1dd
- SHA256
  
  cd7ad63b48a919333bd5ca416babfe632cbe5b1d34f4fbf5819df39c98ad32e2
- SHA512
  
  23482d344c53cf78461d926b20ae7130295ed3e62ea775193c3860a7df9ecf6fa5ecdc12ba318e2a7b0e7042055d45311bea13dfb362fd12a4990a0b1da72323
- SSDEEP
  
  1536:W7ZDpApYbVK4vx4PN54PN4OHepOHeZS1aKa4aKa5:6DWp7W4
Score

9^/10

discovery ransomware
- Renames multiple (337) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware