72d48954c5a0e9d73e9277f87265316637ee9275b16e1b22d368e8c8366ef155 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72d48954c5a0e9d73e9277f87265316637ee9275b16e1b22d368e8c8366ef155N
Size

56KB
Sample

241009-gzq3na1dqd
MD5

af2898f9c5cf7b338570862c40cf4860
SHA1

7c12efb691b68a579da66465715aa5de75f8958e
SHA256

72d48954c5a0e9d73e9277f87265316637ee9275b16e1b22d368e8c8366ef155
SHA512

a9b586bb730dbdd271540f8b54869f852f3e2429cd2e1a18906b3d626e4d86c0bb6289683f14e27315611dcbe42e0c2fdd991a1ab1f54bec383031aad659c415
SSDEEP

384:yBs7Br5xjL8AgA71Fbhvszw/Evd5BvhzaM9mSIEvd5BvhzaM9mSqZsSb9hZs3V7M:/7BlpQpARFbhvEXBwzEXBwLtAc7Fc7w

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  72d48954c5a0e9d73e9277f87265316637ee9275b16e1b22d368e8c8366ef155N
- Size
  
  56KB
- MD5
  
  af2898f9c5cf7b338570862c40cf4860
- SHA1
  
  7c12efb691b68a579da66465715aa5de75f8958e
- SHA256
  
  72d48954c5a0e9d73e9277f87265316637ee9275b16e1b22d368e8c8366ef155
- SHA512
  
  a9b586bb730dbdd271540f8b54869f852f3e2429cd2e1a18906b3d626e4d86c0bb6289683f14e27315611dcbe42e0c2fdd991a1ab1f54bec383031aad659c415
- SSDEEP
  
  384:yBs7Br5xjL8AgA71Fbhvszw/Evd5BvhzaM9mSIEvd5BvhzaM9mSqZsSb9hZs3V7M:/7BlpQpARFbhvEXBwzEXBwLtAc7Fc7w
Score

9^/10

discovery ransomware
- Renames multiple (3213) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware