0b009081c4e6137fbed30b8d29149a8bb44a694afaf58a41f8b2ac3b6c72f9c8 | Triage

Sharing

General

Target

0b009081c4e6137fbed30b8d29149a8bb44a694afaf58a41f8b2ac3b6c72f9c8N
Size

77KB
Sample

240919-d2yczayfrm
MD5

6af4e35786f59bc134b9d6eab9fe5020
SHA1

1a1c1c01f7d5757f41faf2f9acae28edac550db6
SHA256

0b009081c4e6137fbed30b8d29149a8bb44a694afaf58a41f8b2ac3b6c72f9c8
SHA512

ce1361265d11eab12beefc3dcf7e92e01f13eec383f99862448837a50530efa780d85900547feae3a52ba703fe9f1562cd62bd4e7138ca94a484af72136793c7
SSDEEP

768:W7Blp+pARFbhtlmlQ3y3RWvf+wi1x9f+wi1xBTCcX8vgCcX8vSd5hdx8O/Gum/Gs:W7Z+pApfGQ3y3RWvfmRfm9sKsSd5Nkd

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  0b009081c4e6137fbed30b8d29149a8bb44a694afaf58a41f8b2ac3b6c72f9c8N
- Size
  
  77KB
- MD5
  
  6af4e35786f59bc134b9d6eab9fe5020
- SHA1
  
  1a1c1c01f7d5757f41faf2f9acae28edac550db6
- SHA256
  
  0b009081c4e6137fbed30b8d29149a8bb44a694afaf58a41f8b2ac3b6c72f9c8
- SHA512
  
  ce1361265d11eab12beefc3dcf7e92e01f13eec383f99862448837a50530efa780d85900547feae3a52ba703fe9f1562cd62bd4e7138ca94a484af72136793c7
- SSDEEP
  
  768:W7Blp+pARFbhtlmlQ3y3RWvf+wi1x9f+wi1xBTCcX8vgCcX8vSd5hdx8O/Gum/Gs:W7Z+pApfGQ3y3RWvfmRfm9sKsSd5Nkd
Score

9^/10

discovery ransomware
- Renames multiple (338) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware