21e05ec1d25fbd8a6a56d330b557d479f1bad01b3a36b65d032cc56826b0c527 | Triage

Sharing

General

Target

21e05ec1d25fbd8a6a56d330b557d479f1bad01b3a36b65d032cc56826b0c527N
Size

67KB
Sample

240919-enj4vszfnf
MD5

c8995a93b9a9a68d0abac378a3e09650
SHA1

a417a5dc5fcbab0e371fd87d0f3de5b01e61ad5d
SHA256

21e05ec1d25fbd8a6a56d330b557d479f1bad01b3a36b65d032cc56826b0c527
SHA512

0364d794c61dc280ebdb15d73a9b9bcf782aeff9d47535a4a50d2ef09d1ce44bedae4935975eee83ed7fb3536bbfa78797d02ef9cb2e9c024e8036da7ac69ed9
SSDEEP

1536:W7ZppApBULcfpHLcfpX2/Nw/NwmxLTopK:6pWpBwchcV2WxLTl

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  21e05ec1d25fbd8a6a56d330b557d479f1bad01b3a36b65d032cc56826b0c527N
- Size
  
  67KB
- MD5
  
  c8995a93b9a9a68d0abac378a3e09650
- SHA1
  
  a417a5dc5fcbab0e371fd87d0f3de5b01e61ad5d
- SHA256
  
  21e05ec1d25fbd8a6a56d330b557d479f1bad01b3a36b65d032cc56826b0c527
- SHA512
  
  0364d794c61dc280ebdb15d73a9b9bcf782aeff9d47535a4a50d2ef09d1ce44bedae4935975eee83ed7fb3536bbfa78797d02ef9cb2e9c024e8036da7ac69ed9
- SSDEEP
  
  1536:W7ZppApBULcfpHLcfpX2/Nw/NwmxLTopK:6pWpBwchcV2WxLTl
Score

9^/10

discovery ransomware
- Renames multiple (3135) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware