General

  • Target

    41c34dc55f234d83c0ef3152530befa4b39dc286807eeaf3c793d926e45e6066

  • Size

    23KB

  • Sample

    240725-zmz4xateqr

  • MD5

    5bfb4e03e6e614d988c78d44e7b1bbd8

  • SHA1

    7a0fd65bddf3636a373d4ce4f9e83c5d14e4de8f

  • SHA256

    41c34dc55f234d83c0ef3152530befa4b39dc286807eeaf3c793d926e45e6066

  • SHA512

    4f518811cb8ae9f64bb30895b95dce5e9d9c946529c58961ab2fffd0ea02e61eceb48297cb57d0260932e471ad058d2f8e4bc25e57e0abf4d175cb95e2a54233

  • SSDEEP

    384:QOlIBXDaU7CPKK0TIhfJJPbUEobUE51li6A6U:kBT37CPKKdJJTU3U2l6

Malware Config

Targets

    • Target

      41c34dc55f234d83c0ef3152530befa4b39dc286807eeaf3c793d926e45e6066

    • Size

      23KB

    • MD5

      5bfb4e03e6e614d988c78d44e7b1bbd8

    • SHA1

      7a0fd65bddf3636a373d4ce4f9e83c5d14e4de8f

    • SHA256

      41c34dc55f234d83c0ef3152530befa4b39dc286807eeaf3c793d926e45e6066

    • SHA512

      4f518811cb8ae9f64bb30895b95dce5e9d9c946529c58961ab2fffd0ea02e61eceb48297cb57d0260932e471ad058d2f8e4bc25e57e0abf4d175cb95e2a54233

    • SSDEEP

      384:QOlIBXDaU7CPKK0TIhfJJPbUEobUE51li6A6U:kBT37CPKKdJJTU3U2l6

    • Renames multiple (3747) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks