3f75c3d74a63afa196e6066628816c535e21465bee72c84f6536ba2c53e7054e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f75c3d74a63afa196e6066628816c535e21465bee72c84f6536ba2c53e7054e
Size

51KB
Sample

241008-zeh6esxhmh
MD5

ae690a3d8289c146bb4d4d539a800cd4
SHA1

85ec269b85921b5417a060322ed05acc9c94305f
SHA256

3f75c3d74a63afa196e6066628816c535e21465bee72c84f6536ba2c53e7054e
SHA512

2aa1deb7aa208d7c5b3deca357ce043a37b904355c95bf4b910fa35fb601a96fb1bfd1ba5512cef05053b2f70473808baa665c9ace081bb988e59d1539e0b735
SSDEEP

768:W7Blp+pARFbhBgnKLMWK9WKD2N2LSarSaXfgT+i1xrfgT+i1xZ:W7Z+pAp2nKLRKIKqoLSarSaXYXYl

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  3f75c3d74a63afa196e6066628816c535e21465bee72c84f6536ba2c53e7054e
- Size
  
  51KB
- MD5
  
  ae690a3d8289c146bb4d4d539a800cd4
- SHA1
  
  85ec269b85921b5417a060322ed05acc9c94305f
- SHA256
  
  3f75c3d74a63afa196e6066628816c535e21465bee72c84f6536ba2c53e7054e
- SHA512
  
  2aa1deb7aa208d7c5b3deca357ce043a37b904355c95bf4b910fa35fb601a96fb1bfd1ba5512cef05053b2f70473808baa665c9ace081bb988e59d1539e0b735
- SSDEEP
  
  768:W7Blp+pARFbhBgnKLMWK9WKD2N2LSarSaXfgT+i1xrfgT+i1xZ:W7Z+pAp2nKLRKIKqoLSarSaXYXYl
Score

9^/10

discovery ransomware
- Renames multiple (3783) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware