General

  • Target

    e827e449846848ff756fa77b05c746e7256b62e5f5b2ad4afe0e4bafa17e2471

  • Size

    77KB

  • Sample

    240904-lk8flsxfln

  • MD5

    7800dd85d3dff863dc878c996b225882

  • SHA1

    d20d6f736db4c439854fe37174fd9fe71051d82d

  • SHA256

    e827e449846848ff756fa77b05c746e7256b62e5f5b2ad4afe0e4bafa17e2471

  • SHA512

    454ff923743e657d425f0bb8d101f68016c8ad4106d3f691e035984b625b73a72233c58d8787b045b6f5493dec5da7a2d8a23bd016393ec9849b4b49801c8cb0

  • SSDEEP

    1536:CTWn1++PJHJXA/OsIZfzc3/Q8IZxJfes9r9VJhJA:KQSo7ZxJdZVJhJA

Malware Config

Targets

    • Target

      e827e449846848ff756fa77b05c746e7256b62e5f5b2ad4afe0e4bafa17e2471

    • Size

      77KB

    • MD5

      7800dd85d3dff863dc878c996b225882

    • SHA1

      d20d6f736db4c439854fe37174fd9fe71051d82d

    • SHA256

      e827e449846848ff756fa77b05c746e7256b62e5f5b2ad4afe0e4bafa17e2471

    • SHA512

      454ff923743e657d425f0bb8d101f68016c8ad4106d3f691e035984b625b73a72233c58d8787b045b6f5493dec5da7a2d8a23bd016393ec9849b4b49801c8cb0

    • SSDEEP

      1536:CTWn1++PJHJXA/OsIZfzc3/Q8IZxJfes9r9VJhJA:KQSo7ZxJdZVJhJA

    • Renames multiple (3756) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks