a3705042b780e8576dd0678ceb0db8d01d4ea8b9fd170c57a8359399366fe9e1 | Triage

Sharing

General

Target

a3705042b780e8576dd0678ceb0db8d01d4ea8b9fd170c57a8359399366fe9e1
Size

104KB
Sample

240913-a86fdavelm
MD5

5d4ea5d003e21b89670085c42f217d6f
SHA1

71ab1b8290a8c6493d4c886d8c14ddc4bd0fbf43
SHA256

a3705042b780e8576dd0678ceb0db8d01d4ea8b9fd170c57a8359399366fe9e1
SHA512

cb0fc925b68cd58a7221638455ad3ff59d1f05e2b0af8eee9be15aef77f525359c75252266371586d42ba792ce84d3b54579831da1ad925616350fdf4c858333
SSDEEP

3072:6e7WpHIyRF9ESWu0SWujKsKRsP9fVL9ilV:RqlIyFESWu0SWu86jYlV

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  a3705042b780e8576dd0678ceb0db8d01d4ea8b9fd170c57a8359399366fe9e1
- Size
  
  104KB
- MD5
  
  5d4ea5d003e21b89670085c42f217d6f
- SHA1
  
  71ab1b8290a8c6493d4c886d8c14ddc4bd0fbf43
- SHA256
  
  a3705042b780e8576dd0678ceb0db8d01d4ea8b9fd170c57a8359399366fe9e1
- SHA512
  
  cb0fc925b68cd58a7221638455ad3ff59d1f05e2b0af8eee9be15aef77f525359c75252266371586d42ba792ce84d3b54579831da1ad925616350fdf4c858333
- SSDEEP
  
  3072:6e7WpHIyRF9ESWu0SWujKsKRsP9fVL9ilV:RqlIyFESWu0SWu86jYlV
Score

9^/10

discovery ransomware
- Renames multiple (3453) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware