036c7a6dd6611681c86cf5a5e280cee15d2c66d3fb0a29fd3f052d0df99addb7 | Triage

Sharing

General

Target

036c7a6dd6611681c86cf5a5e280cee15d2c66d3fb0a29fd3f052d0df99addb7
Size

40KB
Sample

240809-wtyymstdrn
MD5

2d2217feb5f36d075070cfd9a1c2209f
SHA1

0985efa96af2020f1bd9bd4524261a4b3004632d
SHA256

036c7a6dd6611681c86cf5a5e280cee15d2c66d3fb0a29fd3f052d0df99addb7
SHA512

720bf354bd9a974048a25deb51e8c522d6ee17c5a41d92d27dcd86fae86c43426e6b01dfd0cde54062127cfcd6dfd7a5a7d4ab551fe59b58ac3fabcc2a944afc
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42Lcfpb2N231F1r:W7ZppApBULcfpHLcfpSo3fB

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  036c7a6dd6611681c86cf5a5e280cee15d2c66d3fb0a29fd3f052d0df99addb7
- Size
  
  40KB
- MD5
  
  2d2217feb5f36d075070cfd9a1c2209f
- SHA1
  
  0985efa96af2020f1bd9bd4524261a4b3004632d
- SHA256
  
  036c7a6dd6611681c86cf5a5e280cee15d2c66d3fb0a29fd3f052d0df99addb7
- SHA512
  
  720bf354bd9a974048a25deb51e8c522d6ee17c5a41d92d27dcd86fae86c43426e6b01dfd0cde54062127cfcd6dfd7a5a7d4ab551fe59b58ac3fabcc2a944afc
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42Lcfpb2N231F1r:W7ZppApBULcfpHLcfpSo3fB
Score

9^/10

discovery ransomware
- Renames multiple (3777) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware