71b4e873015eb260c01f33c7ff458632d2a972036219ccbac756521939078e90 | Triage

Sharing

General

Target

71b4e873015eb260c01f33c7ff458632d2a972036219ccbac756521939078e90N
Size

102KB
Sample

240919-galfwatara
MD5

a3119c4d7a00d627ef15f71346803610
SHA1

9505caef0f75591f87f22e1f33e0e7caadaa0626
SHA256

71b4e873015eb260c01f33c7ff458632d2a972036219ccbac756521939078e90
SHA512

40ed5eb01c2e9e60b1d9cb465a646890f4fed0cc54ac07ee812f2e8099a4c1e0f4f1ead9707f1fe8df53d93674467f8a058124d725f63434ddc84b848c30c2b6
SSDEEP

3072:6e7WpMaxeb0CYJ97lEYNR73e+eKZHfFpsJOfFpsJ6X9:RqKvb0CYJ973e+eKZ/

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  71b4e873015eb260c01f33c7ff458632d2a972036219ccbac756521939078e90N
- Size
  
  102KB
- MD5
  
  a3119c4d7a00d627ef15f71346803610
- SHA1
  
  9505caef0f75591f87f22e1f33e0e7caadaa0626
- SHA256
  
  71b4e873015eb260c01f33c7ff458632d2a972036219ccbac756521939078e90
- SHA512
  
  40ed5eb01c2e9e60b1d9cb465a646890f4fed0cc54ac07ee812f2e8099a4c1e0f4f1ead9707f1fe8df53d93674467f8a058124d725f63434ddc84b848c30c2b6
- SSDEEP
  
  3072:6e7WpMaxeb0CYJ97lEYNR73e+eKZHfFpsJOfFpsJ6X9:RqKvb0CYJ973e+eKZ/
Score

9^/10

discovery ransomware
- Renames multiple (3073) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware