bcdd4db0234fb04b2741d64a6333ae7c014a65c90c60051b32d589b1b13ef8ff | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bcdd4db0234fb04b2741d64a6333ae7c014a65c90c60051b32d589b1b13ef8ffN
Size

42KB
Sample

240918-x83e2syhra
MD5

1b04a6bdaad619ca8270e39bc79f41d0
SHA1

d6964703b26dcb80c5cbb292842d715c9c08d078
SHA256

bcdd4db0234fb04b2741d64a6333ae7c014a65c90c60051b32d589b1b13ef8ff
SHA512

ffd7d316cd7c5347445f3bec9fb0d52c18a2aa1b3763ae7624dd6747da95725769354c5da4886e66a01a463aead9cbd7cea6ed93493f657bdf1253770522f0ba
SSDEEP

768:W7BlphA7pARFbhM0Kkq81LOyq81LOw2pqpF+3:W7ZhA7pApM21LOA1LOrwG

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  bcdd4db0234fb04b2741d64a6333ae7c014a65c90c60051b32d589b1b13ef8ffN
- Size
  
  42KB
- MD5
  
  1b04a6bdaad619ca8270e39bc79f41d0
- SHA1
  
  d6964703b26dcb80c5cbb292842d715c9c08d078
- SHA256
  
  bcdd4db0234fb04b2741d64a6333ae7c014a65c90c60051b32d589b1b13ef8ff
- SHA512
  
  ffd7d316cd7c5347445f3bec9fb0d52c18a2aa1b3763ae7624dd6747da95725769354c5da4886e66a01a463aead9cbd7cea6ed93493f657bdf1253770522f0ba
- SSDEEP
  
  768:W7BlphA7pARFbhM0Kkq81LOyq81LOw2pqpF+3:W7ZhA7pApM21LOA1LOrwG
Score

9^/10

discovery ransomware
- Renames multiple (3683) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware