86b635ab9a4d1a03528fb8b0a790fc109329a4dca683de71b141e4cdc75cf001 | Triage

Sharing

General

Target

86b635ab9a4d1a03528fb8b0a790fc109329a4dca683de71b141e4cdc75cf001
Size

45KB
Sample

241005-alp5wavalk
MD5

976710d976a44df9e5133ffb90317683
SHA1

501451de784ecf2064799a2e648c4b609b7e0bcf
SHA256

86b635ab9a4d1a03528fb8b0a790fc109329a4dca683de71b141e4cdc75cf001
SHA512

bff2eed745d7c8e403eed872df90122c1c2155c2b0ec46b011c50f33dbd736897b85b6324371ad5fe68bb1d0daa2285a559a404b987882435ca59528144be8a3
SSDEEP

768:W7Blp+pARFbhBgnKLMWK9WKD2N2LSarSaV:W7Z+pAp2nKLRKIKqoLSarSaV

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  86b635ab9a4d1a03528fb8b0a790fc109329a4dca683de71b141e4cdc75cf001
- Size
  
  45KB
- MD5
  
  976710d976a44df9e5133ffb90317683
- SHA1
  
  501451de784ecf2064799a2e648c4b609b7e0bcf
- SHA256
  
  86b635ab9a4d1a03528fb8b0a790fc109329a4dca683de71b141e4cdc75cf001
- SHA512
  
  bff2eed745d7c8e403eed872df90122c1c2155c2b0ec46b011c50f33dbd736897b85b6324371ad5fe68bb1d0daa2285a559a404b987882435ca59528144be8a3
- SSDEEP
  
  768:W7Blp+pARFbhBgnKLMWK9WKD2N2LSarSaV:W7Z+pAp2nKLRKIKqoLSarSaV
Score

9^/10

discovery ransomware
- Renames multiple (3736) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware