General

  • Target

    6097cff5631e773e354d5e532051d358efa4cc72848f6f9f7a64bf3c1116615c

  • Size

    42KB

  • Sample

    240725-17xpys1ere

  • MD5

    69a04a278f11ca13f83f8e3547158c35

  • SHA1

    de14fdaaf5351b151b72bdde68c355dc4243b384

  • SHA256

    6097cff5631e773e354d5e532051d358efa4cc72848f6f9f7a64bf3c1116615c

  • SHA512

    5167dfa07ff7e9ea48ebb58bd15e4f744137e5e1b07e95d25dbfe349410e77a3ae6ecf6d542aa3543a97685e7d565c0bf2e71605f94b026dd4d068258bf2140b

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATBR:V7Zf/FAxTWoJJZENTBR

Malware Config

Targets

    • Target

      6097cff5631e773e354d5e532051d358efa4cc72848f6f9f7a64bf3c1116615c

    • Size

      42KB

    • MD5

      69a04a278f11ca13f83f8e3547158c35

    • SHA1

      de14fdaaf5351b151b72bdde68c355dc4243b384

    • SHA256

      6097cff5631e773e354d5e532051d358efa4cc72848f6f9f7a64bf3c1116615c

    • SHA512

      5167dfa07ff7e9ea48ebb58bd15e4f744137e5e1b07e95d25dbfe349410e77a3ae6ecf6d542aa3543a97685e7d565c0bf2e71605f94b026dd4d068258bf2140b

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATBR:V7Zf/FAxTWoJJZENTBR

    • Renames multiple (3649) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks