General

  • Target

    2ceb046677d79622e5ea51a5061081110b605640c23daddf4c85b6e4c3c7fc23

  • Size

    98KB

  • Sample

    240802-ym4xessgnd

  • MD5

    46bd88b85f7193e8ad4f31a19616efe9

  • SHA1

    c007b5303aa9fcaa0dd19977f862504db643f0c3

  • SHA256

    2ceb046677d79622e5ea51a5061081110b605640c23daddf4c85b6e4c3c7fc23

  • SHA512

    d9cebb75b22f89daddc31b32a19966fee8610e62b1ec31d7b38c6d32f992a9d3b777a27422ac58799a91487f197fe1df51081a0a9353657cdc77b97c297a4cc6

  • SSDEEP

    3072:fnyiQSoJUBM+PocOQejPdMRAHAASnnD5D5172HyZU3YF40S5DnumSFDnDHaJP1B5:KiQSo/V

Malware Config

Targets

    • Target

      2ceb046677d79622e5ea51a5061081110b605640c23daddf4c85b6e4c3c7fc23

    • Size

      98KB

    • MD5

      46bd88b85f7193e8ad4f31a19616efe9

    • SHA1

      c007b5303aa9fcaa0dd19977f862504db643f0c3

    • SHA256

      2ceb046677d79622e5ea51a5061081110b605640c23daddf4c85b6e4c3c7fc23

    • SHA512

      d9cebb75b22f89daddc31b32a19966fee8610e62b1ec31d7b38c6d32f992a9d3b777a27422ac58799a91487f197fe1df51081a0a9353657cdc77b97c297a4cc6

    • SSDEEP

      3072:fnyiQSoJUBM+PocOQejPdMRAHAASnnD5D5172HyZU3YF40S5DnumSFDnDHaJP1B5:KiQSo/V

    • Renames multiple (3489) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks