General

  • Target

    e8d323c43ea7d7a8e92650f15f4359358f2e271e870f9ec89ed83e170ab042c9

  • Size

    53KB

  • Sample

    240620-fh6w4szdkg

  • MD5

    8c4fb74c1a041f8b5840cca0fc82ec6e

  • SHA1

    d4b90dff230bb16e72916415f99b3384cab9aa9c

  • SHA256

    e8d323c43ea7d7a8e92650f15f4359358f2e271e870f9ec89ed83e170ab042c9

  • SHA512

    f0e35465ab3e200dc8e4f8267cd49b05ad7dccd3695dbbb903dc15914d2b265ab6c783f29c53dc8a2b7c35c279247316e250e417c66315a15f871aaed239d7c8

  • SSDEEP

    768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFzA:CTWn1++PJHJXA/OsIZfzc3/Q8zxSLx

Score
10/10

Malware Config

Targets

    • Target

      e8d323c43ea7d7a8e92650f15f4359358f2e271e870f9ec89ed83e170ab042c9

    • Size

      53KB

    • MD5

      8c4fb74c1a041f8b5840cca0fc82ec6e

    • SHA1

      d4b90dff230bb16e72916415f99b3384cab9aa9c

    • SHA256

      e8d323c43ea7d7a8e92650f15f4359358f2e271e870f9ec89ed83e170ab042c9

    • SHA512

      f0e35465ab3e200dc8e4f8267cd49b05ad7dccd3695dbbb903dc15914d2b265ab6c783f29c53dc8a2b7c35c279247316e250e417c66315a15f871aaed239d7c8

    • SSDEEP

      768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFzA:CTWn1++PJHJXA/OsIZfzc3/Q8zxSLx

    Score
    9/10
    • Renames multiple (3741) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks