af3cf69af4fac9f6d41c8dfcce3de9bca9f98cf0c4b384ea057ce77026eaee9e | Triage

Sharing

General

Target

336eeda04cf8435f061200c07c493e80N.exe
Size

75KB
Sample

240807-aqymtavfrj
MD5

336eeda04cf8435f061200c07c493e80
SHA1

d9c106d4452504db915021172c444ea5aff74d71
SHA256

af3cf69af4fac9f6d41c8dfcce3de9bca9f98cf0c4b384ea057ce77026eaee9e
SHA512

1701a3c9925cbed4721e85e96f6762a0a8091d6fc4f2a2e7825d1700fc18a5b6a7e20213f9bbcdef5a588341e99a19ee7037e1825aba71aae6ff59a8c2b10fc5
SSDEEP

1536:W7ZhA7pApMaxB4b0CYJ97lEVqNR7YNNdNpyI8yI+:6e7WpMaxeb0CYJ97lEYNR7kzlS+

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  336eeda04cf8435f061200c07c493e80N.exe
- Size
  
  75KB
- MD5
  
  336eeda04cf8435f061200c07c493e80
- SHA1
  
  d9c106d4452504db915021172c444ea5aff74d71
- SHA256
  
  af3cf69af4fac9f6d41c8dfcce3de9bca9f98cf0c4b384ea057ce77026eaee9e
- SHA512
  
  1701a3c9925cbed4721e85e96f6762a0a8091d6fc4f2a2e7825d1700fc18a5b6a7e20213f9bbcdef5a588341e99a19ee7037e1825aba71aae6ff59a8c2b10fc5
- SSDEEP
  
  1536:W7ZhA7pApMaxB4b0CYJ97lEVqNR7YNNdNpyI8yI+:6e7WpMaxeb0CYJ97lEYNR7kzlS+
Score

9^/10

discovery ransomware
- Renames multiple (3231) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware