General

  • Target

    b77b67cf5335f0d47f95ee836b159c30N

  • Size

    55KB

  • Sample

    240826-b89ngazdpq

  • MD5

    b77b67cf5335f0d47f95ee836b159c30

  • SHA1

    931e87d8f6e4cb772ed90a8afffc60588b5fff5a

  • SHA256

    4408ca5db951434b526a267eaeea3225f28ca001203f24ad54476582b23f93b8

  • SHA512

    b6d786a87da787f14873c3264d60c9029d2657dff469b5b8721e6c9c95842dd4ca725ca62e39ea8a0a278e329cb7c526b58a2cc8ddcf898b0a8926a8777a58b8

  • SSDEEP

    1536:CTWn1++PJHJXA/OsIZfzc3/Q8asUsK8/8lTm:KQSohsUsxk8

Malware Config

Targets

    • Target

      b77b67cf5335f0d47f95ee836b159c30N

    • Size

      55KB

    • MD5

      b77b67cf5335f0d47f95ee836b159c30

    • SHA1

      931e87d8f6e4cb772ed90a8afffc60588b5fff5a

    • SHA256

      4408ca5db951434b526a267eaeea3225f28ca001203f24ad54476582b23f93b8

    • SHA512

      b6d786a87da787f14873c3264d60c9029d2657dff469b5b8721e6c9c95842dd4ca725ca62e39ea8a0a278e329cb7c526b58a2cc8ddcf898b0a8926a8777a58b8

    • SSDEEP

      1536:CTWn1++PJHJXA/OsIZfzc3/Q8asUsK8/8lTm:KQSohsUsxk8

    • Renames multiple (3213) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks