8c921aff3e42d25c2a030f70b8cb7c6e42eb46cb61930550463ebd69efab7205 | Triage

Sharing

General

Target

8c921aff3e42d25c2a030f70b8cb7c6e42eb46cb61930550463ebd69efab7205N
Size

59KB
Sample

241002-k9ezxssdjb
MD5

ba46c4b98b950c5ca77b8ca027a4c960
SHA1

d0faf3c6b5b0b3939adf8bdb678e950907bdd13a
SHA256

8c921aff3e42d25c2a030f70b8cb7c6e42eb46cb61930550463ebd69efab7205
SHA512

0ee1da0163acf88dceb41786434976a07b275431822645ed8a36dec9d7b3bab21ebaabe6c98ed44766dcc22c33d1c124a722c784186f01d6a2d6af70252831bd
SSDEEP

1536:W7ZrpApojswv0EhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFsoN:6rWpcsHEhLfyBtPf50FWkFpPDze/qFsk

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  8c921aff3e42d25c2a030f70b8cb7c6e42eb46cb61930550463ebd69efab7205N
- Size
  
  59KB
- MD5
  
  ba46c4b98b950c5ca77b8ca027a4c960
- SHA1
  
  d0faf3c6b5b0b3939adf8bdb678e950907bdd13a
- SHA256
  
  8c921aff3e42d25c2a030f70b8cb7c6e42eb46cb61930550463ebd69efab7205
- SHA512
  
  0ee1da0163acf88dceb41786434976a07b275431822645ed8a36dec9d7b3bab21ebaabe6c98ed44766dcc22c33d1c124a722c784186f01d6a2d6af70252831bd
- SSDEEP
  
  1536:W7ZrpApojswv0EhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFsoN:6rWpcsHEhLfyBtPf50FWkFpPDze/qFsk
Score

9^/10

discovery ransomware
- Renames multiple (3213) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware