a43690b827c347e3c78257759faae8317a0c27992d5cea7d8d9bb255f64e04bd | Triage

Sharing

General

Target

a43690b827c347e3c78257759faae8317a0c27992d5cea7d8d9bb255f64e04bdN
Size

48KB
Sample

240919-gcx8fstdrp
MD5

6360f7f944daae7ea0b2f7e9f5c1fb80
SHA1

2183f86ad1fe46428e76a1c2b52de5039c743d4a
SHA256

a43690b827c347e3c78257759faae8317a0c27992d5cea7d8d9bb255f64e04bd
SHA512

966f37a9c5804b70d78268b63cba355b236838a85757106551440c8954f27180d2fb5abd5764838c166a91060d40147710e0aa40cfe94cc779568efa93b167fb
SSDEEP

768:W7BlphA7pARFbhM0Kkq81LOyq81LORWAnWAkpUE5c5gSCFJFK:W7ZhA7pApM21LOA1LOrtkpt6af4

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  a43690b827c347e3c78257759faae8317a0c27992d5cea7d8d9bb255f64e04bdN
- Size
  
  48KB
- MD5
  
  6360f7f944daae7ea0b2f7e9f5c1fb80
- SHA1
  
  2183f86ad1fe46428e76a1c2b52de5039c743d4a
- SHA256
  
  a43690b827c347e3c78257759faae8317a0c27992d5cea7d8d9bb255f64e04bd
- SHA512
  
  966f37a9c5804b70d78268b63cba355b236838a85757106551440c8954f27180d2fb5abd5764838c166a91060d40147710e0aa40cfe94cc779568efa93b167fb
- SSDEEP
  
  768:W7BlphA7pARFbhM0Kkq81LOyq81LORWAnWAkpUE5c5gSCFJFK:W7ZhA7pApM21LOA1LOrtkpt6af4
Score

9^/10

discovery ransomware
- Renames multiple (4073) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware