3604e6032ec23efc049dbbe619c6d19102c475c4f33988db55e291e408588b8d | Triage

Sharing

General

Target

3604e6032ec23efc049dbbe619c6d19102c475c4f33988db55e291e408588b8d
Size

61KB
Sample

240811-y1nscswcrn
MD5

78b1a64e0ff2742a6fdd49ad9bb9ce78
SHA1

a4302ae3557642b105c31d0a0fb57d1089bf6516
SHA256

3604e6032ec23efc049dbbe619c6d19102c475c4f33988db55e291e408588b8d
SHA512

330083006919afe31e074d99c49e63eaaa5e18f5a88506fc434751f4e5fdfcc422e6ffa68ac153b198786d7bf8ff49792291cad5708193d6845ca1ead529ecdf
SSDEEP

768:/7BlpQpARFbhIYJIJDYJIJPfFpsJcFfFpsJcC+3mC+3meDAfABJ6fABJwEXBk:/7ZQpApze+eJfFpsJOfFpsJ5Dc

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  3604e6032ec23efc049dbbe619c6d19102c475c4f33988db55e291e408588b8d
- Size
  
  61KB
- MD5
  
  78b1a64e0ff2742a6fdd49ad9bb9ce78
- SHA1
  
  a4302ae3557642b105c31d0a0fb57d1089bf6516
- SHA256
  
  3604e6032ec23efc049dbbe619c6d19102c475c4f33988db55e291e408588b8d
- SHA512
  
  330083006919afe31e074d99c49e63eaaa5e18f5a88506fc434751f4e5fdfcc422e6ffa68ac153b198786d7bf8ff49792291cad5708193d6845ca1ead529ecdf
- SSDEEP
  
  768:/7BlpQpARFbhIYJIJDYJIJPfFpsJcFfFpsJcC+3mC+3meDAfABJ6fABJwEXBk:/7ZQpApze+eJfFpsJOfFpsJ5Dc
Score

9^/10

discovery ransomware
- Renames multiple (3548) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware