General

  • Target

    38d66c721a3aab515c9c9d7aa31e4d4f90a2a5d651cad0e988131d210a627963

  • Size

    90KB

  • Sample

    240824-z6jk9ssaqj

  • MD5

    131840aeb545ecc594918207ca45a185

  • SHA1

    49bc8bab282b2e41fe189547e26ee4627174ae05

  • SHA256

    38d66c721a3aab515c9c9d7aa31e4d4f90a2a5d651cad0e988131d210a627963

  • SHA512

    769a04169c1213684a1423e56d99091ca1d4c59dbbca7a097a60f705511d75487496d90c4a14785ee456c75095755f2c6182a7d35e935e887321cd52d132a203

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJTUNOZBT37CPKKdJJTUNOJZaZZ:V7Zf/FAxTWoJJTUNOjTW7JJTUNOY

Malware Config

Targets

    • Target

      38d66c721a3aab515c9c9d7aa31e4d4f90a2a5d651cad0e988131d210a627963

    • Size

      90KB

    • MD5

      131840aeb545ecc594918207ca45a185

    • SHA1

      49bc8bab282b2e41fe189547e26ee4627174ae05

    • SHA256

      38d66c721a3aab515c9c9d7aa31e4d4f90a2a5d651cad0e988131d210a627963

    • SHA512

      769a04169c1213684a1423e56d99091ca1d4c59dbbca7a097a60f705511d75487496d90c4a14785ee456c75095755f2c6182a7d35e935e887321cd52d132a203

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJTUNOZBT37CPKKdJJTUNOJZaZZ:V7Zf/FAxTWoJJTUNOjTW7JJTUNOY

    • Renames multiple (3435) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks