4d4df87cf8d8551d836f67fbde4337863bac3ff6b5cb324675054ea023b12ab6 | Triage

Resubmissions

12/12/2024, 19:32

241212-x9e15svnbv 10

12/12/2024, 19:32

241212-x8638sxjep 9

12/12/2024, 19:19

241212-x1wyaswqbq 10

Sharing

General

Target

4d4df87cf8d8551d836f67fbde4337863bac3ff6b5cb324675054ea023b12ab6
Size

624KB
Sample

241212-x8638sxjep
MD5

84b88ac81e4872ff3bf15c72f431d101
SHA1

0823d067541de16325e5454a91b57262365a0705
SHA256

4d4df87cf8d8551d836f67fbde4337863bac3ff6b5cb324675054ea023b12ab6
SHA512

185691b0103669c5aa25b22c36f29ddb66f074e0f2e3ae6a36ed8917c35f1fba71fba65c11c3211ce64f6c5919ac879ce0fdcc4dddae420cbecf40711dff1860
SSDEEP

12288:V4eCA30wfnlxvaUwZNf6qYID7ZJuIQOsknZh20QyCkje0ZM7qgbGKTO7muYpralU:3C8valgsDyfSBKXyMUkW2LILGBm3IzPB

Score

9^/10

defense_evasion discovery execution impact ransomware

Malware Config

Targets

- Target
  
  4d4df87cf8d8551d836f67fbde4337863bac3ff6b5cb324675054ea023b12ab6
- Size
  
  624KB
- MD5
  
  84b88ac81e4872ff3bf15c72f431d101
- SHA1
  
  0823d067541de16325e5454a91b57262365a0705
- SHA256
  
  4d4df87cf8d8551d836f67fbde4337863bac3ff6b5cb324675054ea023b12ab6
- SHA512
  
  185691b0103669c5aa25b22c36f29ddb66f074e0f2e3ae6a36ed8917c35f1fba71fba65c11c3211ce64f6c5919ac879ce0fdcc4dddae420cbecf40711dff1860
- SSDEEP
  
  12288:V4eCA30wfnlxvaUwZNf6qYID7ZJuIQOsknZh20QyCkje0ZM7qgbGKTO7muYpralU:3C8valgsDyfSBKXyMUkW2LILGBm3IzPB
Score

9^/10

defense_evasion discovery execution impact ransomware
- Deletes shadow copies
  Ransomware often targets backup files to inhibit system recovery.
  ransomware defense_evasion impact execution
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Windows Management Instrumentation

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

Indicator Removal

File Deletion

Credential Access

Discovery

Network Share Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Inhibit System Recovery

Tasks

static1

behavioral1

defense_evasiondiscoveryexecutionimpactransomware

behavioral2

discoveryexecution