General

  • Target

    5d9962e8a1ba79979f5331b618b09245443ea98c106fea30a4b2159c7d992f5c

  • Size

    50KB

  • Sample

    240602-2hrm3she5w

  • MD5

    c95e49ebb28fe91116e5b9b066f05097

  • SHA1

    1724a0aec014cb588754af713f2597ce41ace5c8

  • SHA256

    5d9962e8a1ba79979f5331b618b09245443ea98c106fea30a4b2159c7d992f5c

  • SHA512

    ab0e9133998355cf90ae90d103f6bdb823b06046d962cf2a1df8a621135f536b153e6325a760221c2e7208e6955f249b6a1a810ab93aa27f0ca9513077f32536

  • SSDEEP

    768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFFH:CTWn1++PJHJXA/OsIZfzc3/Q8F5W5o

Score
10/10

Malware Config

Targets

    • Target

      5d9962e8a1ba79979f5331b618b09245443ea98c106fea30a4b2159c7d992f5c

    • Size

      50KB

    • MD5

      c95e49ebb28fe91116e5b9b066f05097

    • SHA1

      1724a0aec014cb588754af713f2597ce41ace5c8

    • SHA256

      5d9962e8a1ba79979f5331b618b09245443ea98c106fea30a4b2159c7d992f5c

    • SHA512

      ab0e9133998355cf90ae90d103f6bdb823b06046d962cf2a1df8a621135f536b153e6325a760221c2e7208e6955f249b6a1a810ab93aa27f0ca9513077f32536

    • SSDEEP

      768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFFH:CTWn1++PJHJXA/OsIZfzc3/Q8F5W5o

    Score
    9/10
    • Renames multiple (3549) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks