1b9ff849f23ac8b17cb197071251c9519bc6306b3d6c4d1ca7848cf7c80ebbce | Triage

Sharing

General

Target

1b9ff849f23ac8b17cb197071251c9519bc6306b3d6c4d1ca7848cf7c80ebbceN
Size

48KB
Sample

241010-jhwypa1fka
MD5

c96009fc4e5015b0d7824861a2b9c640
SHA1

8a2b3fa9ef32bb9d4c78c1ac58432b004a173b1e
SHA256

1b9ff849f23ac8b17cb197071251c9519bc6306b3d6c4d1ca7848cf7c80ebbce
SHA512

f68e81946fed99e21af51fd55b162130912105e03743a76c7a97658971c64b20a4e328380071202ca57621bf34be1f4b9f96c1dcd007f7320d7692e6e4e973dc
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42Lcfpb2N231F1itvtBj9:W7ZppApBULcfpHLcfpSo3fstvtn

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  1b9ff849f23ac8b17cb197071251c9519bc6306b3d6c4d1ca7848cf7c80ebbceN
- Size
  
  48KB
- MD5
  
  c96009fc4e5015b0d7824861a2b9c640
- SHA1
  
  8a2b3fa9ef32bb9d4c78c1ac58432b004a173b1e
- SHA256
  
  1b9ff849f23ac8b17cb197071251c9519bc6306b3d6c4d1ca7848cf7c80ebbce
- SHA512
  
  f68e81946fed99e21af51fd55b162130912105e03743a76c7a97658971c64b20a4e328380071202ca57621bf34be1f4b9f96c1dcd007f7320d7692e6e4e973dc
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42Lcfpb2N231F1itvtBj9:W7ZppApBULcfpHLcfpSo3fstvtn
Score

9^/10

discovery ransomware
- Renames multiple (3426) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware