3dcae8319f40bfd1761c4369ce7168c2035d2ccd18392c97fe8932c5fab64f83 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dcae8319f40bfd1761c4369ce7168c2035d2ccd18392c97fe8932c5fab64f83
Size

56KB
Sample

240914-y93mwavaml
MD5

939ab7a0f9a2e3dfa4f48dd646fd9fa8
SHA1

7f3e21e4ba05f15f5384be0891f9e3cbac3d54c2
SHA256

3dcae8319f40bfd1761c4369ce7168c2035d2ccd18392c97fe8932c5fab64f83
SHA512

071a585717e915d95080a4980a4d3bc495ec8d1fb19ccaafa6a506faa75a32e9b7c6876e7d6aee7091e74f032f6d8fec339152854bf4f41e2a61d40a7ac75d8d
SSDEEP

1536:W7ZppApBULcfpHLcfpyDA6swXwTfmKJfmKj:6pWpBwchcwD8wXwx

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  3dcae8319f40bfd1761c4369ce7168c2035d2ccd18392c97fe8932c5fab64f83
- Size
  
  56KB
- MD5
  
  939ab7a0f9a2e3dfa4f48dd646fd9fa8
- SHA1
  
  7f3e21e4ba05f15f5384be0891f9e3cbac3d54c2
- SHA256
  
  3dcae8319f40bfd1761c4369ce7168c2035d2ccd18392c97fe8932c5fab64f83
- SHA512
  
  071a585717e915d95080a4980a4d3bc495ec8d1fb19ccaafa6a506faa75a32e9b7c6876e7d6aee7091e74f032f6d8fec339152854bf4f41e2a61d40a7ac75d8d
- SSDEEP
  
  1536:W7ZppApBULcfpHLcfpyDA6swXwTfmKJfmKj:6pWpBwchcwD8wXwx
Score

9^/10

discovery ransomware
- Renames multiple (3680) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware