9e9fa0b1085397a2f8c5d73fbd8288eabd0837f3a44345139b092779feb12e90 | Triage

Sharing

General

Target

9e9fa0b1085397a2f8c5d73fbd8288eabd0837f3a44345139b092779feb12e90N
Size

35KB
Sample

240919-evccla1bml
MD5

1dc49651359306611908912ae40daa00
SHA1

c4e5eb658b6933015c8bf42b69db5e04a0ad8771
SHA256

9e9fa0b1085397a2f8c5d73fbd8288eabd0837f3a44345139b092779feb12e90
SHA512

6d82b414db90e2a7dce56361973c01f97e7b3d58244ece83cb29de3bd095c277071a836dbf1e371e7792bde8c95b8b5b6d71eacb7bd84f5f38a9cb6e0a526bf9
SSDEEP

768:W7BlphA7pARFbhM0Kkq81LOyq81LOl6Sl5lj:W7ZhA7pApM21LOA1LOl6S

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  9e9fa0b1085397a2f8c5d73fbd8288eabd0837f3a44345139b092779feb12e90N
- Size
  
  35KB
- MD5
  
  1dc49651359306611908912ae40daa00
- SHA1
  
  c4e5eb658b6933015c8bf42b69db5e04a0ad8771
- SHA256
  
  9e9fa0b1085397a2f8c5d73fbd8288eabd0837f3a44345139b092779feb12e90
- SHA512
  
  6d82b414db90e2a7dce56361973c01f97e7b3d58244ece83cb29de3bd095c277071a836dbf1e371e7792bde8c95b8b5b6d71eacb7bd84f5f38a9cb6e0a526bf9
- SSDEEP
  
  768:W7BlphA7pARFbhM0Kkq81LOyq81LOl6Sl5lj:W7ZhA7pApM21LOA1LOl6S
Score

9^/10

discovery ransomware
- Renames multiple (3901) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware