4cfaa731f692903097b8e12abab4da340325215791deb5e84a9e90a2dd0e6587 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4cfaa731f692903097b8e12abab4da340325215791deb5e84a9e90a2dd0e6587N
Size

90KB
Sample

240918-21lvjsxhnj
MD5

08ef756542d5f23ddc04ece1591afea0
SHA1

7669716dc6b9588c11ff0dd74f393c0b139da452
SHA256

4cfaa731f692903097b8e12abab4da340325215791deb5e84a9e90a2dd0e6587
SHA512

4f9034e1c150084919c5aed085c88f128462ea4a911be58da69aa2671efc6b775174aaaca6e2fe30f298846b6a3fce8767f95b2e29c9453d59ac552c061dc9f3
SSDEEP

1536:W7ZhA7pApH9QHwtRF9ESWu0SWutlggalggyaRjvmujvmRzqzlmJgwmJg/SvqBSd:6e7WpHIyRF9ESWu0SWuDm841q6

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  4cfaa731f692903097b8e12abab4da340325215791deb5e84a9e90a2dd0e6587N
- Size
  
  90KB
- MD5
  
  08ef756542d5f23ddc04ece1591afea0
- SHA1
  
  7669716dc6b9588c11ff0dd74f393c0b139da452
- SHA256
  
  4cfaa731f692903097b8e12abab4da340325215791deb5e84a9e90a2dd0e6587
- SHA512
  
  4f9034e1c150084919c5aed085c88f128462ea4a911be58da69aa2671efc6b775174aaaca6e2fe30f298846b6a3fce8767f95b2e29c9453d59ac552c061dc9f3
- SSDEEP
  
  1536:W7ZhA7pApH9QHwtRF9ESWu0SWutlggalggyaRjvmujvmRzqzlmJgwmJg/SvqBSd:6e7WpHIyRF9ESWu0SWuDm841q6
Score

9^/10

discovery ransomware
- Renames multiple (339) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware