General

  • Target

    e731b63837a2f50a5a38bb32662d981295abfa7b7a29520368337e70b5a8fcfa

  • Size

    48KB

  • Sample

    240614-f317cswfrc

  • MD5

    f53ea3115f8e617a981a6990dd70f6bd

  • SHA1

    ba7217869f3ffb4619c51c246b00cb96667b2216

  • SHA256

    e731b63837a2f50a5a38bb32662d981295abfa7b7a29520368337e70b5a8fcfa

  • SHA512

    832b9d13c7816b12609b7dd96caa4dfecf24e1c33c16d689ff0f4091a56f6919bddd4c684cc7691d393895786aed32ae2916feb188e39028727cdec5fb90e285

  • SSDEEP

    768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFzI:CTWn1++PJHJXA/OsIZfzc3/Q8zxAl5

Score
10/10

Malware Config

Targets

    • Target

      e731b63837a2f50a5a38bb32662d981295abfa7b7a29520368337e70b5a8fcfa

    • Size

      48KB

    • MD5

      f53ea3115f8e617a981a6990dd70f6bd

    • SHA1

      ba7217869f3ffb4619c51c246b00cb96667b2216

    • SHA256

      e731b63837a2f50a5a38bb32662d981295abfa7b7a29520368337e70b5a8fcfa

    • SHA512

      832b9d13c7816b12609b7dd96caa4dfecf24e1c33c16d689ff0f4091a56f6919bddd4c684cc7691d393895786aed32ae2916feb188e39028727cdec5fb90e285

    • SSDEEP

      768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFzI:CTWn1++PJHJXA/OsIZfzc3/Q8zxAl5

    Score
    9/10
    • Renames multiple (3773) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks