e461bb5b22f944fc58d539b13b56cdddb5f1176a5b0fbcddcf9ce3762b779ce3 | Triage

Sharing

General

Target

e461bb5b22f944fc58d539b13b56cdddb5f1176a5b0fbcddcf9ce3762b779ce3N
Size

49KB
Sample

240918-lbv4xstamd
MD5

7f51d84f6ae6b8e7903670e7031f6520
SHA1

9776a52c6a2debf8c3e8cc67fbfbdbd6a2f1b5de
SHA256

e461bb5b22f944fc58d539b13b56cdddb5f1176a5b0fbcddcf9ce3762b779ce3
SHA512

1d15097f0da581954ea252a7caa064a1582242c140250b929e7dd6b5a7dc37494de2d8c4be06e70ea13b08543e865e1edf3bff980a56811b23477d896656a5d9
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFHOrBtlBi1xxBtlBi1xE:W7ZppApBULcfpHLcfpyD0070Y

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  e461bb5b22f944fc58d539b13b56cdddb5f1176a5b0fbcddcf9ce3762b779ce3N
- Size
  
  49KB
- MD5
  
  7f51d84f6ae6b8e7903670e7031f6520
- SHA1
  
  9776a52c6a2debf8c3e8cc67fbfbdbd6a2f1b5de
- SHA256
  
  e461bb5b22f944fc58d539b13b56cdddb5f1176a5b0fbcddcf9ce3762b779ce3
- SHA512
  
  1d15097f0da581954ea252a7caa064a1582242c140250b929e7dd6b5a7dc37494de2d8c4be06e70ea13b08543e865e1edf3bff980a56811b23477d896656a5d9
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFHOrBtlBi1xxBtlBi1xE:W7ZppApBULcfpHLcfpyD0070Y
Score

9^/10

discovery ransomware
- Renames multiple (3228) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware