db5ba2cd79e3766cea8b0b130321d8b67af02b8a889d1cdf2d7ade0f6e13de58 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db5ba2cd79e3766cea8b0b130321d8b67af02b8a889d1cdf2d7ade0f6e13de58N
Size

77KB
Sample

241005-xst4qszckl
MD5

4d77dbf0867de3c5140ff362e960bae0
SHA1

5e75c6447f268cb92cd19e63c9778aabcaa5ecfe
SHA256

db5ba2cd79e3766cea8b0b130321d8b67af02b8a889d1cdf2d7ade0f6e13de58
SHA512

c71d124aa803132c84e65a5778bd71c82af58a1a2c967f8a913811a10eafdaf885d812c83cbe19e9261ed6c8bdc311cdd73dd0ecf651c4e3fcf6099c84e4c506
SSDEEP

1536:W7Z2sspApkZrZ4+fU7lK1lKT8/8yNCNzdwEbdwEa:62ssWpcU7lK1lKgka

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  db5ba2cd79e3766cea8b0b130321d8b67af02b8a889d1cdf2d7ade0f6e13de58N
- Size
  
  77KB
- MD5
  
  4d77dbf0867de3c5140ff362e960bae0
- SHA1
  
  5e75c6447f268cb92cd19e63c9778aabcaa5ecfe
- SHA256
  
  db5ba2cd79e3766cea8b0b130321d8b67af02b8a889d1cdf2d7ade0f6e13de58
- SHA512
  
  c71d124aa803132c84e65a5778bd71c82af58a1a2c967f8a913811a10eafdaf885d812c83cbe19e9261ed6c8bdc311cdd73dd0ecf651c4e3fcf6099c84e4c506
- SSDEEP
  
  1536:W7Z2sspApkZrZ4+fU7lK1lKT8/8yNCNzdwEbdwEa:62ssWpcU7lK1lKgka
Score

9^/10

discovery ransomware
- Renames multiple (3109) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware