2aa3120ae61d856e0253a549b8f2fd713f5067bcbd729b1b999462a783ca85e4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2aa3120ae61d856e0253a549b8f2fd713f5067bcbd729b1b999462a783ca85e4
Size

81KB
Sample

240808-yhcmdaycmn
MD5

a04b701daccdae6964fe57d9f15f4a15
SHA1

db2e54764e36c3fb7478f3991e698d4059c60c58
SHA256

2aa3120ae61d856e0253a549b8f2fd713f5067bcbd729b1b999462a783ca85e4
SHA512

073f83d903859f8c7cd1a6f4378dc617f3c1dd428d3abdd4413d9bb1aec69b6fed9134b7b0f0077f7846260b63c3d09e8cb797e93cd5581fabcf34bf5eae695f
SSDEEP

1536:W7ZhA7pApvOsOKODV2xuyL+4GwGHddUykUyu:6e7WpUV2x7L+4XGH4kN

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  2aa3120ae61d856e0253a549b8f2fd713f5067bcbd729b1b999462a783ca85e4
- Size
  
  81KB
- MD5
  
  a04b701daccdae6964fe57d9f15f4a15
- SHA1
  
  db2e54764e36c3fb7478f3991e698d4059c60c58
- SHA256
  
  2aa3120ae61d856e0253a549b8f2fd713f5067bcbd729b1b999462a783ca85e4
- SHA512
  
  073f83d903859f8c7cd1a6f4378dc617f3c1dd428d3abdd4413d9bb1aec69b6fed9134b7b0f0077f7846260b63c3d09e8cb797e93cd5581fabcf34bf5eae695f
- SSDEEP
  
  1536:W7ZhA7pApvOsOKODV2xuyL+4GwGHddUykUyu:6e7WpUV2x7L+4XGH4kN
Score

9^/10

discovery ransomware
- Renames multiple (3455) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware