3e09fc0de95165b2f8fa16d164086a3ace567753a7a77039218e4af6a54f1863 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e09fc0de95165b2f8fa16d164086a3ace567753a7a77039218e4af6a54f1863
Size

45KB
Sample

240725-zhc4kstcml
MD5

2b51e293ed1ae6771c53fe56f5279cbf
SHA1

c33f424be87906589e6ce7b5ba892ba072163f4c
SHA256

3e09fc0de95165b2f8fa16d164086a3ace567753a7a77039218e4af6a54f1863
SHA512

6e0eb15202323f2aa8acd1df4239b788c960c2d8b1c367760298bc6bd341247a7d4527d4f7f24bb5c242fd92031af73e9518eb496fce0932242a9a732b24f016
SSDEEP

768:W7BlpppARFbhShZ/D5zf6ydyf+abMkF24kzK3jbrCkoRWNk+AhZ/D5zf6ydyf+aA:W7ZppApcZ/D5zf6ydyf+abMkF24kzK3c

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  3e09fc0de95165b2f8fa16d164086a3ace567753a7a77039218e4af6a54f1863
- Size
  
  45KB
- MD5
  
  2b51e293ed1ae6771c53fe56f5279cbf
- SHA1
  
  c33f424be87906589e6ce7b5ba892ba072163f4c
- SHA256
  
  3e09fc0de95165b2f8fa16d164086a3ace567753a7a77039218e4af6a54f1863
- SHA512
  
  6e0eb15202323f2aa8acd1df4239b788c960c2d8b1c367760298bc6bd341247a7d4527d4f7f24bb5c242fd92031af73e9518eb496fce0932242a9a732b24f016
- SSDEEP
  
  768:W7BlpppARFbhShZ/D5zf6ydyf+abMkF24kzK3jbrCkoRWNk+AhZ/D5zf6ydyf+aA:W7ZppApcZ/D5zf6ydyf+abMkF24kzK3c
Score

9^/10

discovery ransomware
- Renames multiple (3462) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware