3b584d99dc808129d140dbcbcf033529a0fc6e466c2dd1de2995e78c69fed69d | Triage

Sharing

General

Target

3b584d99dc808129d140dbcbcf033529a0fc6e466c2dd1de2995e78c69fed69d
Size

43KB
Sample

240809-y9kgasxgjp
MD5

58e528f9ea5d816bf04a238035aec5f8
SHA1

8d155f8d4f59e794e1aef454f76b2f5c15e93503
SHA256

3b584d99dc808129d140dbcbcf033529a0fc6e466c2dd1de2995e78c69fed69d
SHA512

a1464e5fbf9b2e07f0319a13b057a037d9d87ca4f0ee4fc020754638c978d37351ce0523a57dc304df122dc2cb957bba9ba5ead51280bd40faee440dcfc6b399
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42Lcfpb2N231F11liKliB:W7ZppApBULcfpHLcfpSo3fO

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  3b584d99dc808129d140dbcbcf033529a0fc6e466c2dd1de2995e78c69fed69d
- Size
  
  43KB
- MD5
  
  58e528f9ea5d816bf04a238035aec5f8
- SHA1
  
  8d155f8d4f59e794e1aef454f76b2f5c15e93503
- SHA256
  
  3b584d99dc808129d140dbcbcf033529a0fc6e466c2dd1de2995e78c69fed69d
- SHA512
  
  a1464e5fbf9b2e07f0319a13b057a037d9d87ca4f0ee4fc020754638c978d37351ce0523a57dc304df122dc2cb957bba9ba5ead51280bd40faee440dcfc6b399
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42Lcfpb2N231F11liKliB:W7ZppApBULcfpHLcfpSo3fO
Score

9^/10

discovery ransomware
- Renames multiple (3880) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware