478daf8416622274acacfb0309187cd16f02d2d5690b44a109cbf84a45904222 | Triage

Sharing

General

Target

478daf8416622274acacfb0309187cd16f02d2d5690b44a109cbf84a45904222N
Size

56KB
Sample

240930-s1v9jsxame
MD5

cadc577caf4cd129e0d20e4acf73a320
SHA1

a32ccb75d533fd789ac8484c7c0d187d70147452
SHA256

478daf8416622274acacfb0309187cd16f02d2d5690b44a109cbf84a45904222
SHA512

5385f4f6d31c2e6e7e518516d855d2f7a952dab73a5246f4a9d9121393c2f2540f457684b5ca0634958a0be1493134df8ef474d9c9c6b1a47e5841e3f8cf8f3f
SSDEEP

1536:W7ZrpApojswv0EhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFsot:6rWpcsHEhLfyBtPf50FWkFpPDze/qFsg

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  478daf8416622274acacfb0309187cd16f02d2d5690b44a109cbf84a45904222N
- Size
  
  56KB
- MD5
  
  cadc577caf4cd129e0d20e4acf73a320
- SHA1
  
  a32ccb75d533fd789ac8484c7c0d187d70147452
- SHA256
  
  478daf8416622274acacfb0309187cd16f02d2d5690b44a109cbf84a45904222
- SHA512
  
  5385f4f6d31c2e6e7e518516d855d2f7a952dab73a5246f4a9d9121393c2f2540f457684b5ca0634958a0be1493134df8ef474d9c9c6b1a47e5841e3f8cf8f3f
- SSDEEP
  
  1536:W7ZrpApojswv0EhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFsot:6rWpcsHEhLfyBtPf50FWkFpPDze/qFsg
Score

9^/10

discovery ransomware
- Renames multiple (3213) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware