937a56411ecbb844364f59562f5ba119975ec313ba32a4db69091d0d66c77eed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

937a56411ecbb844364f59562f5ba119975ec313ba32a4db69091d0d66c77eed
Size

53KB
Sample

240929-ay8srawblb
MD5

bc1396bf9240031e347b98b6c1e753af
SHA1

589149f665306ae15ede98f266a3b85e4b7c7630
SHA256

937a56411ecbb844364f59562f5ba119975ec313ba32a4db69091d0d66c77eed
SHA512

ab78e852324f60e27b2d7280014b36f7948beae90e570dee6f9ef29753ec632d69228b862169b844349ed496176c4ae93ee02772f4f20d158dae3ea66c4c7d3b
SSDEEP

1536:W7ZhA7pApM21LOA1LOl6Aj8Tu8T1Rxew2wXDB:6e7WpMgLOiLOAew2wV

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  937a56411ecbb844364f59562f5ba119975ec313ba32a4db69091d0d66c77eed
- Size
  
  53KB
- MD5
  
  bc1396bf9240031e347b98b6c1e753af
- SHA1
  
  589149f665306ae15ede98f266a3b85e4b7c7630
- SHA256
  
  937a56411ecbb844364f59562f5ba119975ec313ba32a4db69091d0d66c77eed
- SHA512
  
  ab78e852324f60e27b2d7280014b36f7948beae90e570dee6f9ef29753ec632d69228b862169b844349ed496176c4ae93ee02772f4f20d158dae3ea66c4c7d3b
- SSDEEP
  
  1536:W7ZhA7pApM21LOA1LOl6Aj8Tu8T1Rxew2wXDB:6e7WpMgLOiLOAew2wV
Score

9^/10

discovery ransomware
- Renames multiple (3756) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware