a1e49fee24a816cb2f182c295fdbbd4f541850dc92f34e964e7cebb92dc07baa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4fad92ae4eebfb7ff6de1fb7172043b0N
Size

99KB
Sample

240915-jp9s5atcqq
MD5

4fad92ae4eebfb7ff6de1fb7172043b0
SHA1

7cd4bc426aee22e78a3321565144dc371df54205
SHA256

a1e49fee24a816cb2f182c295fdbbd4f541850dc92f34e964e7cebb92dc07baa
SHA512

6a67e3e61a8ba7ff690306ec805aaf409bc5df43335c5e440aead88b7742678138d5b60f12c94ed0c2f3dd112c6e9060511fa64997c57c13409c73548f63cc9c
SSDEEP

1536:W7ZhA7dAZ1++PJHJXA/OsIZXJQLJQBVGgEvKRzNC5WeJ:6e76m6EvKRzF6

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  4fad92ae4eebfb7ff6de1fb7172043b0N
- Size
  
  99KB
- MD5
  
  4fad92ae4eebfb7ff6de1fb7172043b0
- SHA1
  
  7cd4bc426aee22e78a3321565144dc371df54205
- SHA256
  
  a1e49fee24a816cb2f182c295fdbbd4f541850dc92f34e964e7cebb92dc07baa
- SHA512
  
  6a67e3e61a8ba7ff690306ec805aaf409bc5df43335c5e440aead88b7742678138d5b60f12c94ed0c2f3dd112c6e9060511fa64997c57c13409c73548f63cc9c
- SSDEEP
  
  1536:W7ZhA7dAZ1++PJHJXA/OsIZXJQLJQBVGgEvKRzNC5WeJ:6e76m6EvKRzF6
Score

9^/10

discovery ransomware
- Renames multiple (2948) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware