169c57e881ece81ff5038902acd90c1822096326d2fbd886a76b0eb8fc822dac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3164baf66a28168505ff41b36afdb270N.exe
Size

79KB
Sample

240901-aw1dlavbkn
MD5

3164baf66a28168505ff41b36afdb270
SHA1

73ca41d51edf36260e24cfeb1f37421a144a3a3a
SHA256

169c57e881ece81ff5038902acd90c1822096326d2fbd886a76b0eb8fc822dac
SHA512

76e67c60a5c9904da7fac1a7ae81fad33ff28093ea590c08fc43515ec6a3bff4764f86299956e814c95c258726a15c4f855184773662380e7c227b7171898ccc
SSDEEP

1536:W7ZhA7pApvOsOKM4HBhaGwOQ54xEIjlcJ2K:6e7WpRaSljO2K

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  3164baf66a28168505ff41b36afdb270N.exe
- Size
  
  79KB
- MD5
  
  3164baf66a28168505ff41b36afdb270
- SHA1
  
  73ca41d51edf36260e24cfeb1f37421a144a3a3a
- SHA256
  
  169c57e881ece81ff5038902acd90c1822096326d2fbd886a76b0eb8fc822dac
- SHA512
  
  76e67c60a5c9904da7fac1a7ae81fad33ff28093ea590c08fc43515ec6a3bff4764f86299956e814c95c258726a15c4f855184773662380e7c227b7171898ccc
- SSDEEP
  
  1536:W7ZhA7pApvOsOKM4HBhaGwOQ54xEIjlcJ2K:6e7WpRaSljO2K
Score

9^/10

discovery ransomware
- Renames multiple (2952) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware