e0f1b3f44b2bd3e144f1d50dd49a2f912c223a6a700c350f3dbe9968b4012856 | Triage

Sharing

General

Target

e0f1b3f44b2bd3e144f1d50dd49a2f912c223a6a700c350f3dbe9968b4012856N
Size

88KB
Sample

241002-bqvftszemr
MD5

2e5924d839eb2fb9166b7d25131d1210
SHA1

373c9a8a544d5a3a1b174ce25521b6df338a4233
SHA256

e0f1b3f44b2bd3e144f1d50dd49a2f912c223a6a700c350f3dbe9968b4012856
SHA512

f8867e0683843b780c9a0884c0c15f36da5b77638234a67fcf3998c270f754f47cb82839843368880eefb917f9cbff1633257e6233eb4767ab869409decb56bd
SSDEEP

1536:W7Z9pApQESOHepOHe8G+6E65dyGdykNdNBKgg0///x9zKI:69WpQE0zxg4nd

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  e0f1b3f44b2bd3e144f1d50dd49a2f912c223a6a700c350f3dbe9968b4012856N
- Size
  
  88KB
- MD5
  
  2e5924d839eb2fb9166b7d25131d1210
- SHA1
  
  373c9a8a544d5a3a1b174ce25521b6df338a4233
- SHA256
  
  e0f1b3f44b2bd3e144f1d50dd49a2f912c223a6a700c350f3dbe9968b4012856
- SHA512
  
  f8867e0683843b780c9a0884c0c15f36da5b77638234a67fcf3998c270f754f47cb82839843368880eefb917f9cbff1633257e6233eb4767ab869409decb56bd
- SSDEEP
  
  1536:W7Z9pApQESOHepOHe8G+6E65dyGdykNdNBKgg0///x9zKI:69WpQE0zxg4nd
Score

9^/10

discovery ransomware
- Renames multiple (2847) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware