General

  • Target

    4c0cdba34c28fa28178e4e753644c2e0N

  • Size

    35KB

  • Sample

    240826-gbxkjaxglc

  • MD5

    4c0cdba34c28fa28178e4e753644c2e0

  • SHA1

    e68dc346f7372a6f6e54e6cdf7b4194f21220e02

  • SHA256

    a9afa3759b5e2c7af0aea399cd5458ac4ab81743850299461c22259dbba7b534

  • SHA512

    43ad3f152577aa37c60592421af8025fbf57984cf63ef6caad3e186f634dc975d3bffc2ca9c08ec37fc6795a632a4444b0849d7c7af3be3ed4600230aa445d66

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcwBcCBcw/tio/ti0:CTW7JJ7TTQoQ0

Malware Config

Targets

    • Target

      4c0cdba34c28fa28178e4e753644c2e0N

    • Size

      35KB

    • MD5

      4c0cdba34c28fa28178e4e753644c2e0

    • SHA1

      e68dc346f7372a6f6e54e6cdf7b4194f21220e02

    • SHA256

      a9afa3759b5e2c7af0aea399cd5458ac4ab81743850299461c22259dbba7b534

    • SHA512

      43ad3f152577aa37c60592421af8025fbf57984cf63ef6caad3e186f634dc975d3bffc2ca9c08ec37fc6795a632a4444b0849d7c7af3be3ed4600230aa445d66

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcwBcCBcw/tio/ti0:CTW7JJ7TTQoQ0

    • Renames multiple (3343) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks