44905b9e2b8e4362b09c9859f1c700eab315735b3bc6489ad7a199ee393fefd0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44905b9e2b8e4362b09c9859f1c700eab315735b3bc6489ad7a199ee393fefd0N
Size

1.9MB
Sample

240921-hnl51azdqp
MD5

e8697ab08be0d07265835c509ddbb1a0
SHA1

34c095e2698f53419c755c6745b51690775d54f8
SHA256

44905b9e2b8e4362b09c9859f1c700eab315735b3bc6489ad7a199ee393fefd0
SHA512

107783df1e3639885a98479aed6b8a9b0a31f1222f9847db1d2514c84afd9181b6d7127c35f8ec009d2cc8f51c09c518b1924a7a0ad6c24b7d8da742d52f175f
SSDEEP

24576:iFF2+kWV1T0crVjM9RofOStRIdTSIhlnk5ejPY1PsczzWuo4JrY4ktpWmHTnq5XJ:iFhS9RorsNntkJDkWLXkk7CpFG

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  44905b9e2b8e4362b09c9859f1c700eab315735b3bc6489ad7a199ee393fefd0N
- Size
  
  1.9MB
- MD5
  
  e8697ab08be0d07265835c509ddbb1a0
- SHA1
  
  34c095e2698f53419c755c6745b51690775d54f8
- SHA256
  
  44905b9e2b8e4362b09c9859f1c700eab315735b3bc6489ad7a199ee393fefd0
- SHA512
  
  107783df1e3639885a98479aed6b8a9b0a31f1222f9847db1d2514c84afd9181b6d7127c35f8ec009d2cc8f51c09c518b1924a7a0ad6c24b7d8da742d52f175f
- SSDEEP
  
  24576:iFF2+kWV1T0crVjM9RofOStRIdTSIhlnk5ejPY1PsczzWuo4JrY4ktpWmHTnq5XJ:iFhS9RorsNntkJDkWLXkk7CpFG
Score

9^/10

discovery ransomware
- Renames multiple (198) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware