9cb1e0d5ef7052c982e6ed4c09d9666b890e7c1b1bdc1ebf9c3775e4b4abb8bb | Triage

Sharing

General

Target

9cb1e0d5ef7052c982e6ed4c09d9666b890e7c1b1bdc1ebf9c3775e4b4abb8bbN
Size

109KB
Sample

240921-bms4laybld
MD5

1b90e32357e4ee996f7bfe5738c2de30
SHA1

a261b2c52b036609eccae9940532889bccb3edbd
SHA256

9cb1e0d5ef7052c982e6ed4c09d9666b890e7c1b1bdc1ebf9c3775e4b4abb8bb
SHA512

957e8c2d34241859c3dbf8db4ebc04ec18f4ea49ee9eb3af1ed868edea63d63f47847afcfc6a583583c99569ecb401231802458a977e0339c6bad327b008a7d9
SSDEEP

1536:W7ZDpApYbWjIlE77ufL2e+efZwZQ/8S/80PqPIUpCUpiPZ:6DWpwE7oL2e+efZwZ08i8Q

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  9cb1e0d5ef7052c982e6ed4c09d9666b890e7c1b1bdc1ebf9c3775e4b4abb8bbN
- Size
  
  109KB
- MD5
  
  1b90e32357e4ee996f7bfe5738c2de30
- SHA1
  
  a261b2c52b036609eccae9940532889bccb3edbd
- SHA256
  
  9cb1e0d5ef7052c982e6ed4c09d9666b890e7c1b1bdc1ebf9c3775e4b4abb8bb
- SHA512
  
  957e8c2d34241859c3dbf8db4ebc04ec18f4ea49ee9eb3af1ed868edea63d63f47847afcfc6a583583c99569ecb401231802458a977e0339c6bad327b008a7d9
- SSDEEP
  
  1536:W7ZDpApYbWjIlE77ufL2e+efZwZQ/8S/80PqPIUpCUpiPZ:6DWpwE7oL2e+efZwZ08i8Q
Score

9^/10

discovery ransomware
- Renames multiple (2911) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware