30dd190662fdab91687d2f1e7f6667678d0db269f683e219d01e53da32195f5c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30dd190662fdab91687d2f1e7f6667678d0db269f683e219d01e53da32195f5c
Size

49KB
Sample

241013-zakhpa1fmm
MD5

feed5a21bd778c963d72b46bd37c6b47
SHA1

f5a0c9b78066b53c2ee94fd00da9726b3bea7272
SHA256

30dd190662fdab91687d2f1e7f6667678d0db269f683e219d01e53da32195f5c
SHA512

ae3b79f9cec09bd2056bb55d6f51412f85fcfd882ef8bfa2d43848cb76c06e28c3540f419ba03f5c893329c630bd52497d8a8b4d363322342f12f261af2ded8c
SSDEEP

384:GBt7Br5xjL9A7AgA71FbhvnIH2YsTKnKqtaW3WSV6YG:W7BlphA7pARFbhvOsTKnKqtM

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  30dd190662fdab91687d2f1e7f6667678d0db269f683e219d01e53da32195f5c
- Size
  
  49KB
- MD5
  
  feed5a21bd778c963d72b46bd37c6b47
- SHA1
  
  f5a0c9b78066b53c2ee94fd00da9726b3bea7272
- SHA256
  
  30dd190662fdab91687d2f1e7f6667678d0db269f683e219d01e53da32195f5c
- SHA512
  
  ae3b79f9cec09bd2056bb55d6f51412f85fcfd882ef8bfa2d43848cb76c06e28c3540f419ba03f5c893329c630bd52497d8a8b4d363322342f12f261af2ded8c
- SSDEEP
  
  384:GBt7Br5xjL9A7AgA71FbhvnIH2YsTKnKqtaW3WSV6YG:W7BlphA7pARFbhvOsTKnKqtM
Score

9^/10

discovery ransomware
- Renames multiple (3737) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware