b4d5d1a6f5cc52795c57dccdda3a8a632457e3b8b7abdcc297efb40748a280a4 | Triage

Sharing

General

Target

b4d5d1a6f5cc52795c57dccdda3a8a632457e3b8b7abdcc297efb40748a280a4N
Size

81KB
Sample

241010-crj7xsvdqa
MD5

1c2d27876fce3f03da87a82065acd870
SHA1

a3f7a0d3270c171899eaf8f95790ff4c4fde8c82
SHA256

b4d5d1a6f5cc52795c57dccdda3a8a632457e3b8b7abdcc297efb40748a280a4
SHA512

ead9f214a9c46449de2caf296d6ac60856e984831d081eeb656589b041558fc6e18744c6bf94cb6fd1487e243181b7a574d24fb45c9df7c6f34d5029b98325e3
SSDEEP

768:W7BlphA7pARFbhvOsTKnKqtb4HBZjlwGpCYnigugqOzM9bdifwMtxEwJjlVki/7:W7ZhA7pApvOsOKM4HBhaGwOQ54xEIjll

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  b4d5d1a6f5cc52795c57dccdda3a8a632457e3b8b7abdcc297efb40748a280a4N
- Size
  
  81KB
- MD5
  
  1c2d27876fce3f03da87a82065acd870
- SHA1
  
  a3f7a0d3270c171899eaf8f95790ff4c4fde8c82
- SHA256
  
  b4d5d1a6f5cc52795c57dccdda3a8a632457e3b8b7abdcc297efb40748a280a4
- SHA512
  
  ead9f214a9c46449de2caf296d6ac60856e984831d081eeb656589b041558fc6e18744c6bf94cb6fd1487e243181b7a574d24fb45c9df7c6f34d5029b98325e3
- SSDEEP
  
  768:W7BlphA7pARFbhvOsTKnKqtb4HBZjlwGpCYnigugqOzM9bdifwMtxEwJjlVki/7:W7ZhA7pApvOsOKM4HBhaGwOQ54xEIjll
Score

9^/10

discovery ransomware
- Renames multiple (3107) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware