0013a23978c30436f6175cc9810f4d7e5aa464e81638f359ee424b51fe488d58 | Triage

Sharing

General

Target

0013a23978c30436f6175cc9810f4d7e5aa464e81638f359ee424b51fe488d58
Size

81KB
Sample

240921-wpwmqawdjl
MD5

eaa4ed82fe9bab560803269ea668bb8a
SHA1

eb6d8b2d9dc8ba5fd9ab5403862c0bc31b87bbf4
SHA256

0013a23978c30436f6175cc9810f4d7e5aa464e81638f359ee424b51fe488d58
SHA512

d7862504de7f087d1e2fa6ef6c990d10d3786ccac8e379458fad98779aaacc02e6ce3b10c320d33ba1e84b6e6015202856f2b9a43b54f607ef609dfa22f55ad5
SSDEEP

1536:W7ZhA7dAZ1++PJHJXA/OsIZfzc3/Q8asUsJOLKc/xJtLJtTGc:6e76mQSohsUsUK0

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  0013a23978c30436f6175cc9810f4d7e5aa464e81638f359ee424b51fe488d58
- Size
  
  81KB
- MD5
  
  eaa4ed82fe9bab560803269ea668bb8a
- SHA1
  
  eb6d8b2d9dc8ba5fd9ab5403862c0bc31b87bbf4
- SHA256
  
  0013a23978c30436f6175cc9810f4d7e5aa464e81638f359ee424b51fe488d58
- SHA512
  
  d7862504de7f087d1e2fa6ef6c990d10d3786ccac8e379458fad98779aaacc02e6ce3b10c320d33ba1e84b6e6015202856f2b9a43b54f607ef609dfa22f55ad5
- SSDEEP
  
  1536:W7ZhA7dAZ1++PJHJXA/OsIZfzc3/Q8asUsJOLKc/xJtLJtTGc:6e76mQSohsUsUK0
Score

9^/10

discovery ransomware
- Renames multiple (3695) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware