General

  • Target

    87818aa86129e2ca7042cf884e30ad18030f3ede497f5e3efdfb79f20a4e8232

  • Size

    139KB

  • Sample

    240611-aj3ceswemh

  • MD5

    bb33b252ce861d718cd4230a573c5c80

  • SHA1

    deba0a20be715040bb06176f8bbf1171e5f20c44

  • SHA256

    87818aa86129e2ca7042cf884e30ad18030f3ede497f5e3efdfb79f20a4e8232

  • SHA512

    c803ad65509bf1f17abe7fc590b155e3aa95acadc294cb671475d811fbb9c13b7a15fd0115214870223e6af384870ac6b58dffc599ab9d257ed0f400771d8c5c

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8asUsTq5q9BVI2IwTWn1++PJHJXA/OsIl:fnyiQSohsUsWU9BK34QSohsUsWU9BK3T

Score
10/10

Malware Config

Targets

    • Target

      87818aa86129e2ca7042cf884e30ad18030f3ede497f5e3efdfb79f20a4e8232

    • Size

      139KB

    • MD5

      bb33b252ce861d718cd4230a573c5c80

    • SHA1

      deba0a20be715040bb06176f8bbf1171e5f20c44

    • SHA256

      87818aa86129e2ca7042cf884e30ad18030f3ede497f5e3efdfb79f20a4e8232

    • SHA512

      c803ad65509bf1f17abe7fc590b155e3aa95acadc294cb671475d811fbb9c13b7a15fd0115214870223e6af384870ac6b58dffc599ab9d257ed0f400771d8c5c

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8asUsTq5q9BVI2IwTWn1++PJHJXA/OsIl:fnyiQSohsUsWU9BK34QSohsUsWU9BK3T

    Score
    9/10
    • Renames multiple (578) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks