027f67a4654a106e62ccfa3206d3136a5e04e6172b2cc96ee406cee1e8a1b58e | Triage

Sharing

General

Target

027f67a4654a106e62ccfa3206d3136a5e04e6172b2cc96ee406cee1e8a1b58eN
Size

70KB
Sample

240919-jyb88ayfkq
MD5

a29e3bb91af685fb678e4d2dc5984070
SHA1

2012f0a7ea59f577df222218fd60fe5bf040bb40
SHA256

027f67a4654a106e62ccfa3206d3136a5e04e6172b2cc96ee406cee1e8a1b58e
SHA512

d436d166b5bc73043f2999e118d28ecf8f45712283e0276f6d63acc9465d2b82ca0351e42e834ebf12386d49fc9327a0e14e118306da7d2de4ddefe40e71c61a
SSDEEP

1536:W7ZNLpApCZuvIYXxJ75sNpJJ75sNpyPIXxXXS+Sy4SKmEQKmE2:6NLWpCZLYFXxXXS+SmKmTKmn

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  027f67a4654a106e62ccfa3206d3136a5e04e6172b2cc96ee406cee1e8a1b58eN
- Size
  
  70KB
- MD5
  
  a29e3bb91af685fb678e4d2dc5984070
- SHA1
  
  2012f0a7ea59f577df222218fd60fe5bf040bb40
- SHA256
  
  027f67a4654a106e62ccfa3206d3136a5e04e6172b2cc96ee406cee1e8a1b58e
- SHA512
  
  d436d166b5bc73043f2999e118d28ecf8f45712283e0276f6d63acc9465d2b82ca0351e42e834ebf12386d49fc9327a0e14e118306da7d2de4ddefe40e71c61a
- SSDEEP
  
  1536:W7ZNLpApCZuvIYXxJ75sNpJJ75sNpyPIXxXXS+Sy4SKmEQKmE2:6NLWpCZLYFXxXXS+SmKmTKmn
Score

9^/10

discovery ransomware
- Renames multiple (3123) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware