3872a906544d88352fc4ecdb4c6208558c7df898cc60267c939cca3f10a2d59b | Triage

Sharing

General

Target

3872a906544d88352fc4ecdb4c6208558c7df898cc60267c939cca3f10a2d59b
Size

38KB
Sample

240817-zpk3rswemh
MD5

293de79e4ccadb7e4d3a4b01ae3b5c56
SHA1

ad40b2dc5ac4cc2846f23a3526559e12582f5c71
SHA256

3872a906544d88352fc4ecdb4c6208558c7df898cc60267c939cca3f10a2d59b
SHA512

4f49f951df0771e7b5b9d1e9215f467994c1f7cb1f4230ee7c0061fd0572340b54216067f818f66e97691aed1536d9b93e5c03ad1fc73a501c474d4564db0bcc
SSDEEP

768:W7BlphA7pARFbhM0Kkq81LOyq81LOl6Sl5lsSaP:W7ZhA7pApM21LOA1LOl6vSs

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  3872a906544d88352fc4ecdb4c6208558c7df898cc60267c939cca3f10a2d59b
- Size
  
  38KB
- MD5
  
  293de79e4ccadb7e4d3a4b01ae3b5c56
- SHA1
  
  ad40b2dc5ac4cc2846f23a3526559e12582f5c71
- SHA256
  
  3872a906544d88352fc4ecdb4c6208558c7df898cc60267c939cca3f10a2d59b
- SHA512
  
  4f49f951df0771e7b5b9d1e9215f467994c1f7cb1f4230ee7c0061fd0572340b54216067f818f66e97691aed1536d9b93e5c03ad1fc73a501c474d4564db0bcc
- SSDEEP
  
  768:W7BlphA7pARFbhM0Kkq81LOyq81LOl6Sl5lsSaP:W7ZhA7pApM21LOA1LOl6vSs
Score

9^/10

discovery ransomware
- Renames multiple (3663) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware