32706f28bd0597b33d5f55cc85e39304f694d6a58fa80fa9eaf15256f0908c08 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32706f28bd0597b33d5f55cc85e39304f694d6a58fa80fa9eaf15256f0908c08N
Size

84KB
Sample

241002-bsh6kszfll
MD5

a174413c1c79bc41cef4e77357b3a970
SHA1

4431a9cbdfecfacc445374738095d7ffc17fdb35
SHA256

32706f28bd0597b33d5f55cc85e39304f694d6a58fa80fa9eaf15256f0908c08
SHA512

49149ec855d3360bb65626cb9c63e8ff9a9becc670d8ee2652ff6f56aa10fef05af11c67268b3146662a9ac7626dc5e3d1a25eb77f6dbe09f512c886a2c17568
SSDEEP

1536:W7ZhA7dAZ1++PJHJXA/OsIZfzc3/Q8asUsJOLKc/xJtLJtTGLtErp:6e76mQSohsUsUKDtErp

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  32706f28bd0597b33d5f55cc85e39304f694d6a58fa80fa9eaf15256f0908c08N
- Size
  
  84KB
- MD5
  
  a174413c1c79bc41cef4e77357b3a970
- SHA1
  
  4431a9cbdfecfacc445374738095d7ffc17fdb35
- SHA256
  
  32706f28bd0597b33d5f55cc85e39304f694d6a58fa80fa9eaf15256f0908c08
- SHA512
  
  49149ec855d3360bb65626cb9c63e8ff9a9becc670d8ee2652ff6f56aa10fef05af11c67268b3146662a9ac7626dc5e3d1a25eb77f6dbe09f512c886a2c17568
- SSDEEP
  
  1536:W7ZhA7dAZ1++PJHJXA/OsIZfzc3/Q8asUsJOLKc/xJtLJtTGLtErp:6e76mQSohsUsUKDtErp
Score

9^/10

discovery ransomware
- Renames multiple (3153) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware