General

  • Target

    1208a27c7c8e6d68b031e5e432ac56be212bd2829153e7ad66671e7fb5ee5436

  • Size

    25KB

  • Sample

    240902-xgbg9awepg

  • MD5

    99e6bb5f56fbe0a15a53db813c71ab99

  • SHA1

    21f506816cf8623ecdf97d3b97bf7bcb9f5514a6

  • SHA256

    1208a27c7c8e6d68b031e5e432ac56be212bd2829153e7ad66671e7fb5ee5436

  • SHA512

    ccd759d0d9022e19a76a0be2bd9fafb5c46c0c9e22f884b7f55e01013d20b3791e64d87075ba368b4f43d82d754789db82dd49eda2b18dbcd91ae2b0772dfa91

  • SSDEEP

    384:QOlIBXDaU7CPKK0TIhfJJ1Evd5BvhzaM9mSIEvd5BvhzaM9mSsxmMxm9+9Zmuk:kBT37CPKKdJJ1EXBwzEXBwdcMcI9nk

Malware Config

Targets

    • Target

      1208a27c7c8e6d68b031e5e432ac56be212bd2829153e7ad66671e7fb5ee5436

    • Size

      25KB

    • MD5

      99e6bb5f56fbe0a15a53db813c71ab99

    • SHA1

      21f506816cf8623ecdf97d3b97bf7bcb9f5514a6

    • SHA256

      1208a27c7c8e6d68b031e5e432ac56be212bd2829153e7ad66671e7fb5ee5436

    • SHA512

      ccd759d0d9022e19a76a0be2bd9fafb5c46c0c9e22f884b7f55e01013d20b3791e64d87075ba368b4f43d82d754789db82dd49eda2b18dbcd91ae2b0772dfa91

    • SSDEEP

      384:QOlIBXDaU7CPKK0TIhfJJ1Evd5BvhzaM9mSIEvd5BvhzaM9mSsxmMxm9+9Zmuk:kBT37CPKKdJJ1EXBwzEXBwdcMcI9nk

    • Renames multiple (3704) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks