3814aff97f07e2ddf38befb5ebe00aabe2e1bc44a551d13b0cec18e585d9ad43 | Triage

Sharing

General

Target

3814aff97f07e2ddf38befb5ebe00aabe2e1bc44a551d13b0cec18e585d9ad43N.exe
Size

110KB
Sample

240925-m8n8ba1hmr
MD5

cceca70f454acfe7394ac27f6291b600
SHA1

541159017e437ee16b0266e557bc78cf98702a80
SHA256

3814aff97f07e2ddf38befb5ebe00aabe2e1bc44a551d13b0cec18e585d9ad43
SHA512

62172010c7a7aba89433fe87bc5593e0a45066ccb538cf252e3ceb7dcfeb9c1c4049fc04c76afdddd30a07ca43104afe7695b2a5fc06135b00b7c2950bfde60c
SSDEEP

1536:W7ZhA7pApH9QHwtRF9ESWu0SWutlggalggEpVp+ESIXosbosz1vKX/8KX/G:6e7WpHIyRF9ESWu0SWuDmmSIjXT

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  3814aff97f07e2ddf38befb5ebe00aabe2e1bc44a551d13b0cec18e585d9ad43N.exe
- Size
  
  110KB
- MD5
  
  cceca70f454acfe7394ac27f6291b600
- SHA1
  
  541159017e437ee16b0266e557bc78cf98702a80
- SHA256
  
  3814aff97f07e2ddf38befb5ebe00aabe2e1bc44a551d13b0cec18e585d9ad43
- SHA512
  
  62172010c7a7aba89433fe87bc5593e0a45066ccb538cf252e3ceb7dcfeb9c1c4049fc04c76afdddd30a07ca43104afe7695b2a5fc06135b00b7c2950bfde60c
- SSDEEP
  
  1536:W7ZhA7pApH9QHwtRF9ESWu0SWutlggalggEpVp+ESIXosbosz1vKX/8KX/G:6e7WpHIyRF9ESWu0SWuDmmSIjXT
Score

9^/10

discovery ransomware
- Renames multiple (2919) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware