a41947e0bf2a7cccf44906fbb918d27de992306a6625bcdf98d0d6c099bcbd7f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a41947e0bf2a7cccf44906fbb918d27de992306a6625bcdf98d0d6c099bcbd7fN
Size

48KB
Sample

241002-zs4dhszdnh
MD5

7a9e3f3e8f226ca64b3a23e5d7c9d080
SHA1

f0a6165fd0a19214773dd59ebdb99c66463f7a83
SHA256

a41947e0bf2a7cccf44906fbb918d27de992306a6625bcdf98d0d6c099bcbd7f
SHA512

23099882fe1dbd6756a401d5347d6e94509576a2c51f8c496d79db05a750b4b8c55ace93cc0708237c4662b27fa1b42e84fcbc4c175d2055836167470cf7dcf7
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42Lcfpb2N231F1itvtS:W7ZppApBULcfpHLcfpSo3fstvtS

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  a41947e0bf2a7cccf44906fbb918d27de992306a6625bcdf98d0d6c099bcbd7fN
- Size
  
  48KB
- MD5
  
  7a9e3f3e8f226ca64b3a23e5d7c9d080
- SHA1
  
  f0a6165fd0a19214773dd59ebdb99c66463f7a83
- SHA256
  
  a41947e0bf2a7cccf44906fbb918d27de992306a6625bcdf98d0d6c099bcbd7f
- SHA512
  
  23099882fe1dbd6756a401d5347d6e94509576a2c51f8c496d79db05a750b4b8c55ace93cc0708237c4662b27fa1b42e84fcbc4c175d2055836167470cf7dcf7
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42Lcfpb2N231F1itvtS:W7ZppApBULcfpHLcfpSo3fstvtS
Score

9^/10

discovery ransomware
- Renames multiple (3248) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware