dfda1bbb834946b9de45d5b526572b91ffd7bd736173ddf0cd6c6a6027325ed2 | Triage

Sharing

General

Target

dfda1bbb834946b9de45d5b526572b91ffd7bd736173ddf0cd6c6a6027325ed2N
Size

50KB
Sample

241004-rwd9ssyhmn
MD5

3ffc0353d2cca8f343b745be54b3e380
SHA1

87df3d739ab97ce6926355dbbfbdb5e96db8f529
SHA256

dfda1bbb834946b9de45d5b526572b91ffd7bd736173ddf0cd6c6a6027325ed2
SHA512

12600cfbaf8de130fdb67bfc7b00b0d09442345991e813a29242472aa7fb2d912903d83e41b4b83da749977636626c44211ed9358c86b6f815ef1130c00abee3
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFeK5c5jm7I1Q1b:W7ZppApBULcfpHLcfpyD56Bm7O2b

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  dfda1bbb834946b9de45d5b526572b91ffd7bd736173ddf0cd6c6a6027325ed2N
- Size
  
  50KB
- MD5
  
  3ffc0353d2cca8f343b745be54b3e380
- SHA1
  
  87df3d739ab97ce6926355dbbfbdb5e96db8f529
- SHA256
  
  dfda1bbb834946b9de45d5b526572b91ffd7bd736173ddf0cd6c6a6027325ed2
- SHA512
  
  12600cfbaf8de130fdb67bfc7b00b0d09442345991e813a29242472aa7fb2d912903d83e41b4b83da749977636626c44211ed9358c86b6f815ef1130c00abee3
- SSDEEP
  
  768:W7BlpppARFbhjbhg42LcfpR42LcfproFNFeK5c5jm7I1Q1b:W7ZppApBULcfpHLcfpyD56Bm7O2b
Score

9^/10

discovery ransomware
- Renames multiple (3167) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware