72724f2a01cf0354b22fcd42eb9900e872e6a7e5ee17da03b9dfbece7875948b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72724f2a01cf0354b22fcd42eb9900e872e6a7e5ee17da03b9dfbece7875948bN
Size

43KB
Sample

240927-xexygathmp
MD5

fcbbdcb62f3f42ed86eb879832d19cf0
SHA1

87bde547712e53a1cf203226cd2c095f8b6055eb
SHA256

72724f2a01cf0354b22fcd42eb9900e872e6a7e5ee17da03b9dfbece7875948b
SHA512

0a5fe5ccc02e06a4f09a1d9d5d40b2a7cb234ee91b1bf6260a80fcbfeb3a6c8f532ea7eb500920e4654b5d976a8c956c127748ab2279c3c4839e93620af6c8c8
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFcdyGdy+zWzS//G:W7ZppApBULcfpHLcfpyDcdyGdya2

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  72724f2a01cf0354b22fcd42eb9900e872e6a7e5ee17da03b9dfbece7875948bN
- Size
  
  43KB
- MD5
  
  fcbbdcb62f3f42ed86eb879832d19cf0
- SHA1
  
  87bde547712e53a1cf203226cd2c095f8b6055eb
- SHA256
  
  72724f2a01cf0354b22fcd42eb9900e872e6a7e5ee17da03b9dfbece7875948b
- SHA512
  
  0a5fe5ccc02e06a4f09a1d9d5d40b2a7cb234ee91b1bf6260a80fcbfeb3a6c8f532ea7eb500920e4654b5d976a8c956c127748ab2279c3c4839e93620af6c8c8
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFcdyGdy+zWzS//G:W7ZppApBULcfpHLcfpyDcdyGdya2
Score

9^/10

discovery ransomware
- Renames multiple (389) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware