a61447199a6f49f33fb24ab2534bba0c299ae5b625476b277543d27e554772f9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a61447199a6f49f33fb24ab2534bba0c299ae5b625476b277543d27e554772f9N
Size

49KB
Sample

240921-s24x3szglj
MD5

dcbd6a4b43e3e8b9be7055b413e91550
SHA1

9734857178585d23385ecc0f54b095eea61c11b0
SHA256

a61447199a6f49f33fb24ab2534bba0c299ae5b625476b277543d27e554772f9
SHA512

efd1affaff89b0553cdcfb3cafd134a7a670fc21663b5932d23c962fa2bdd377e4ccfee2fe48ef7e13320e30a8591251e17a1bdbb22340b0d80b62f900a8fb7a
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFjqAJLOqAJLBbfCDTbfCDNXM:W7ZppApBULcfpHLcfpyDkbfGTbfGNXM

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  a61447199a6f49f33fb24ab2534bba0c299ae5b625476b277543d27e554772f9N
- Size
  
  49KB
- MD5
  
  dcbd6a4b43e3e8b9be7055b413e91550
- SHA1
  
  9734857178585d23385ecc0f54b095eea61c11b0
- SHA256
  
  a61447199a6f49f33fb24ab2534bba0c299ae5b625476b277543d27e554772f9
- SHA512
  
  efd1affaff89b0553cdcfb3cafd134a7a670fc21663b5932d23c962fa2bdd377e4ccfee2fe48ef7e13320e30a8591251e17a1bdbb22340b0d80b62f900a8fb7a
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFjqAJLOqAJLBbfCDTbfCDNXM:W7ZppApBULcfpHLcfpyDkbfGTbfGNXM
Score

9^/10

discovery ransomware
- Renames multiple (3255) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware