General

  • Target

    d1d196afe103a1e0a61b82be22d3366898624c8c24c198593f2dd55900e79947

  • Size

    69KB

  • Sample

    240611-d4dfkssfke

  • MD5

    c60ffe5a5e17a263586bc4961811cde0

  • SHA1

    f8367411ac4982d40704adb2ab193bdf71a88f18

  • SHA256

    d1d196afe103a1e0a61b82be22d3366898624c8c24c198593f2dd55900e79947

  • SHA512

    528c657a2f84c069769d636412d34361f7019cd353d9b9929d9ba2431424782fd9d206b2dbbebf2be8382452223b4503c3bd7eac4a539b29b3084ee6ba72a97e

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxbI0:fnyiQSoqI0

Score
10/10

Malware Config

Targets

    • Target

      d1d196afe103a1e0a61b82be22d3366898624c8c24c198593f2dd55900e79947

    • Size

      69KB

    • MD5

      c60ffe5a5e17a263586bc4961811cde0

    • SHA1

      f8367411ac4982d40704adb2ab193bdf71a88f18

    • SHA256

      d1d196afe103a1e0a61b82be22d3366898624c8c24c198593f2dd55900e79947

    • SHA512

      528c657a2f84c069769d636412d34361f7019cd353d9b9929d9ba2431424782fd9d206b2dbbebf2be8382452223b4503c3bd7eac4a539b29b3084ee6ba72a97e

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxbI0:fnyiQSoqI0

    Score
    9/10
    • Renames multiple (3502) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks