General

  • Target

    c96f9eb7ab53db8c4814420f65874a1a48a0c7580120d7442d0f774e30818214

  • Size

    111KB

  • Sample

    240811-csskpavcnb

  • MD5

    774ecb74cee5d2341ddb8254927292ae

  • SHA1

    d6a269836cf440486411ce94ccff7e20e7517f4e

  • SHA256

    c96f9eb7ab53db8c4814420f65874a1a48a0c7580120d7442d0f774e30818214

  • SHA512

    9e9c560463d6717b3cd2f72b7bf23de6ff950f6f25e85553f60833177a5e06cf014079613df8623780d116278cf0a65a7ae86bba3d547d72b79172c0447a77ea

  • SSDEEP

    1536:V7Zf/FAxTWtnMdyGdy4AnAFTWUnMdyGdy4AnA6mI:fnyGnpAbnpAQ

Malware Config

Targets

    • Target

      c96f9eb7ab53db8c4814420f65874a1a48a0c7580120d7442d0f774e30818214

    • Size

      111KB

    • MD5

      774ecb74cee5d2341ddb8254927292ae

    • SHA1

      d6a269836cf440486411ce94ccff7e20e7517f4e

    • SHA256

      c96f9eb7ab53db8c4814420f65874a1a48a0c7580120d7442d0f774e30818214

    • SHA512

      9e9c560463d6717b3cd2f72b7bf23de6ff950f6f25e85553f60833177a5e06cf014079613df8623780d116278cf0a65a7ae86bba3d547d72b79172c0447a77ea

    • SSDEEP

      1536:V7Zf/FAxTWtnMdyGdy4AnAFTWUnMdyGdy4AnA6mI:fnyGnpAbnpAQ

    • Renames multiple (3473) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks