5eb1bcfb10ad3763b8ec2cf273628612c3267437f18e598aa6b4ca933d954963 | Triage

Sharing

General

Target

5eb1bcfb10ad3763b8ec2cf273628612c3267437f18e598aa6b4ca933d954963N
Size

75KB
Sample

241006-cbanjstera
MD5

c604e786f7f86c4604e0e8f8e352d9b0
SHA1

822af4aa6918e5a32839f0e7c20122acba9708e5
SHA256

5eb1bcfb10ad3763b8ec2cf273628612c3267437f18e598aa6b4ca933d954963
SHA512

522f5fdd2812abd03bf559a952342f5478ee77afac834c9bb4da25428176cb8fa6eb08e0ac158a9ff8ef93cd252d2e94c520f36cf62dbbb4ea508c872269fe2e
SSDEEP

768:/7BlpQpARFbhIYJIJDYJIJPfFpsJcFfFpsJcC+3mC+3meDAfABJ6fABJwEXBwzEr:/7ZQpApze+eJfFpsJOfFpsJ5DJ

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  5eb1bcfb10ad3763b8ec2cf273628612c3267437f18e598aa6b4ca933d954963N
- Size
  
  75KB
- MD5
  
  c604e786f7f86c4604e0e8f8e352d9b0
- SHA1
  
  822af4aa6918e5a32839f0e7c20122acba9708e5
- SHA256
  
  5eb1bcfb10ad3763b8ec2cf273628612c3267437f18e598aa6b4ca933d954963
- SHA512
  
  522f5fdd2812abd03bf559a952342f5478ee77afac834c9bb4da25428176cb8fa6eb08e0ac158a9ff8ef93cd252d2e94c520f36cf62dbbb4ea508c872269fe2e
- SSDEEP
  
  768:/7BlpQpARFbhIYJIJDYJIJPfFpsJcFfFpsJcC+3mC+3meDAfABJ6fABJwEXBwzEr:/7ZQpApze+eJfFpsJOfFpsJ5DJ
Score

9^/10

discovery ransomware
- Renames multiple (3165) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware