85956228c6566b68710bfb28ab6be25a6081ccf2b28cef1a127a7820e60859b4 | Triage

Sharing

General

Target

85956228c6566b68710bfb28ab6be25a6081ccf2b28cef1a127a7820e60859b4N
Size

38KB
Sample

240921-r4qykaxhml
MD5

fd3e35724a7ac6942ed041dcf888ff40
SHA1

bbcb8d317271735256bb44b0c3114a756587fcbb
SHA256

85956228c6566b68710bfb28ab6be25a6081ccf2b28cef1a127a7820e60859b4
SHA512

d78a185069c96a6b5401fefc580b3187a273a61c2606ba6c4cdb830963412677d51dea7cd7841bf6fd54c5e6e4b25a8aac55da4577934fa98c339f4854d2e62a
SSDEEP

384:GBt7Br5xjL9A7AgA71FbhvnwR/s4Nkq81LOyq81LOUqKqeUE:W7BlphA7pARFbhM0Kkq81LOyq81LOw

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  85956228c6566b68710bfb28ab6be25a6081ccf2b28cef1a127a7820e60859b4N
- Size
  
  38KB
- MD5
  
  fd3e35724a7ac6942ed041dcf888ff40
- SHA1
  
  bbcb8d317271735256bb44b0c3114a756587fcbb
- SHA256
  
  85956228c6566b68710bfb28ab6be25a6081ccf2b28cef1a127a7820e60859b4
- SHA512
  
  d78a185069c96a6b5401fefc580b3187a273a61c2606ba6c4cdb830963412677d51dea7cd7841bf6fd54c5e6e4b25a8aac55da4577934fa98c339f4854d2e62a
- SSDEEP
  
  384:GBt7Br5xjL9A7AgA71FbhvnwR/s4Nkq81LOyq81LOUqKqeUE:W7BlphA7pARFbhM0Kkq81LOyq81LOw
Score

9^/10

discovery ransomware
- Renames multiple (3273) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware