General

  • Target

    c888974d540e23793bf0c3ee5b64447a56e6299d9773dbd60ee526e84cf33006

  • Size

    63KB

  • Sample

    240903-j43ncsshkg

  • MD5

    1f66c323bdba7e27d8cf07a0b3b54183

  • SHA1

    c7edfa00fa1961363e89ba8e4d0a835edbe6c286

  • SHA256

    c888974d540e23793bf0c3ee5b64447a56e6299d9773dbd60ee526e84cf33006

  • SHA512

    f953442f04023b810bec8ee6a4432f80d9e2d4d3d6334c0196e6fdb2ed5d9e65f4b74a0cefd954b60a315a5c458291ce6603fcacf319e23f7e2f4844dc559072

  • SSDEEP

    1536:V7Zf/FAxTWoJJTU3UytJfOKI+h/YI+h/BS:fny1sI+h/YI+h/BS

Malware Config

Targets

    • Target

      c888974d540e23793bf0c3ee5b64447a56e6299d9773dbd60ee526e84cf33006

    • Size

      63KB

    • MD5

      1f66c323bdba7e27d8cf07a0b3b54183

    • SHA1

      c7edfa00fa1961363e89ba8e4d0a835edbe6c286

    • SHA256

      c888974d540e23793bf0c3ee5b64447a56e6299d9773dbd60ee526e84cf33006

    • SHA512

      f953442f04023b810bec8ee6a4432f80d9e2d4d3d6334c0196e6fdb2ed5d9e65f4b74a0cefd954b60a315a5c458291ce6603fcacf319e23f7e2f4844dc559072

    • SSDEEP

      1536:V7Zf/FAxTWoJJTU3UytJfOKI+h/YI+h/BS:fny1sI+h/YI+h/BS

    • Renames multiple (3638) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks