General

  • Target

    ed3c379ebb64f7c1fc4b3e9234df253ac3366436c889f0efa7330089a23c8ca4

  • Size

    84KB

  • Sample

    240825-hpmsxssdrp

  • MD5

    29d24e9ba5dfcc41660af6db18e09aeb

  • SHA1

    27ea490b1bed36ab3af2d2508a6b9b609dac0236

  • SHA256

    ed3c379ebb64f7c1fc4b3e9234df253ac3366436c889f0efa7330089a23c8ca4

  • SHA512

    7bf4ce5297f6af3eaa7509bd4a4821687a442221367b602ce930affbdbf9627f88ecf703568cdf1fdb7d55887c8f1cbb260ac21f44292a795133dd84781f0cbb

  • SSDEEP

    1536:V7Zf/FAxTWtnMdyGdyHEREvBnHHwTVEvBnHHwTe:fnyGnSTM

Malware Config

Targets

    • Target

      ed3c379ebb64f7c1fc4b3e9234df253ac3366436c889f0efa7330089a23c8ca4

    • Size

      84KB

    • MD5

      29d24e9ba5dfcc41660af6db18e09aeb

    • SHA1

      27ea490b1bed36ab3af2d2508a6b9b609dac0236

    • SHA256

      ed3c379ebb64f7c1fc4b3e9234df253ac3366436c889f0efa7330089a23c8ca4

    • SHA512

      7bf4ce5297f6af3eaa7509bd4a4821687a442221367b602ce930affbdbf9627f88ecf703568cdf1fdb7d55887c8f1cbb260ac21f44292a795133dd84781f0cbb

    • SSDEEP

      1536:V7Zf/FAxTWtnMdyGdyHEREvBnHHwTVEvBnHHwTe:fnyGnSTM

    • Renames multiple (3595) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks