efedb16f62b64444e9e9b7f03762b8b6ab847b837cca3a40234b8fd701dd5f38 | Triage

Sharing

General

Target

efedb16f62b64444e9e9b7f03762b8b6ab847b837cca3a40234b8fd701dd5f38N
Size

40KB
Sample

240921-t719tasdmd
MD5

82f26e636206e8ff5eaa0a745935ca60
SHA1

8701fbf9883e0422c459372aaed01560d582f9e0
SHA256

efedb16f62b64444e9e9b7f03762b8b6ab847b837cca3a40234b8fd701dd5f38
SHA512

cacfebc960a95828cfa9c6616d48e145330c3a3e24d9b491c0a426db1fe89edd31f649b366668b8f349c3e77147ade78b0de8afb400bae094f96bdfd269b9e97
SSDEEP

384:GBt7Br5xjL9A7AgA71FbhvnwR/s4Nkq81LOyq81LOUqKqeU/v8MvQ:W7BlphA7pARFbhM0Kkq81LOyq81LObpQ

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  efedb16f62b64444e9e9b7f03762b8b6ab847b837cca3a40234b8fd701dd5f38N
- Size
  
  40KB
- MD5
  
  82f26e636206e8ff5eaa0a745935ca60
- SHA1
  
  8701fbf9883e0422c459372aaed01560d582f9e0
- SHA256
  
  efedb16f62b64444e9e9b7f03762b8b6ab847b837cca3a40234b8fd701dd5f38
- SHA512
  
  cacfebc960a95828cfa9c6616d48e145330c3a3e24d9b491c0a426db1fe89edd31f649b366668b8f349c3e77147ade78b0de8afb400bae094f96bdfd269b9e97
- SSDEEP
  
  384:GBt7Br5xjL9A7AgA71FbhvnwR/s4Nkq81LOyq81LOUqKqeU/v8MvQ:W7BlphA7pARFbhM0Kkq81LOyq81LObpQ
Score

9^/10

discovery ransomware
- Renames multiple (3453) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware