21a199dadb3813ba15fb3dfb064069c80d331b8866e0f7eb42f6cfcdf6429cae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21a199dadb3813ba15fb3dfb064069c80d331b8866e0f7eb42f6cfcdf6429caeN
Size

95KB
Sample

240921-ny98ga1akc
MD5

ccb91f537b4bb0446853fa20a3bf0ae0
SHA1

f9b7dac2e150dab2e34401ef24f5f5ed288e1415
SHA256

21a199dadb3813ba15fb3dfb064069c80d331b8866e0f7eb42f6cfcdf6429cae
SHA512

e5fc8e98d3436ff650105311c1e82848d10bfc05f9e4f713e2853acdcd78e286b16c3f5d12defaeed12cfe2905b1d0be02e528b1640fc28e66bb63fce7e7cb45
SSDEEP

1536:W7ZhA7pApH9QHwtRF9ESWu0SWujodsodaNovTW+SPL+cycWAF689ilxMo:6e7WpHIyRF9ESWu0SWujKsKRsP9fVL9O

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  21a199dadb3813ba15fb3dfb064069c80d331b8866e0f7eb42f6cfcdf6429caeN
- Size
  
  95KB
- MD5
  
  ccb91f537b4bb0446853fa20a3bf0ae0
- SHA1
  
  f9b7dac2e150dab2e34401ef24f5f5ed288e1415
- SHA256
  
  21a199dadb3813ba15fb3dfb064069c80d331b8866e0f7eb42f6cfcdf6429cae
- SHA512
  
  e5fc8e98d3436ff650105311c1e82848d10bfc05f9e4f713e2853acdcd78e286b16c3f5d12defaeed12cfe2905b1d0be02e528b1640fc28e66bb63fce7e7cb45
- SSDEEP
  
  1536:W7ZhA7pApH9QHwtRF9ESWu0SWujodsodaNovTW+SPL+cycWAF689ilxMo:6e7WpHIyRF9ESWu0SWujKsKRsP9fVL9O
Score

9^/10

discovery ransomware
- Renames multiple (2920) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware