41aff372a27df7741d76bcfe0be410a296a4aed2e855296a5bf4d07751f47bbc | Triage

Sharing

General

Target

41aff372a27df7741d76bcfe0be410a296a4aed2e855296a5bf4d07751f47bbc
Size

88KB
Sample

240914-zfj44svfme
MD5

7b15b47645283912b8400e1bc8a67d07
SHA1

d9f4ef6ae1feb9188781751e7f64f9827d112ac9
SHA256

41aff372a27df7741d76bcfe0be410a296a4aed2e855296a5bf4d07751f47bbc
SHA512

7e76d86742838c863dd9131aee9b0c38a1f7fcc6e8ec007061c0126e6ce6701c447cff3a60316da547b2725aa957913a6dd8bb93dcbdaf3dbe7edab2f094b96e
SSDEEP

1536:W7ZppApUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFsAcEhS:6pWpUFpEhLfyBtPf50FWkFpPDze/qFs/

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  41aff372a27df7741d76bcfe0be410a296a4aed2e855296a5bf4d07751f47bbc
- Size
  
  88KB
- MD5
  
  7b15b47645283912b8400e1bc8a67d07
- SHA1
  
  d9f4ef6ae1feb9188781751e7f64f9827d112ac9
- SHA256
  
  41aff372a27df7741d76bcfe0be410a296a4aed2e855296a5bf4d07751f47bbc
- SHA512
  
  7e76d86742838c863dd9131aee9b0c38a1f7fcc6e8ec007061c0126e6ce6701c447cff3a60316da547b2725aa957913a6dd8bb93dcbdaf3dbe7edab2f094b96e
- SSDEEP
  
  1536:W7ZppApUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFsAcEhS:6pWpUFpEhLfyBtPf50FWkFpPDze/qFs/
Score

9^/10

discovery ransomware
- Renames multiple (3682) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware