General

  • Target

    35348c86c59a86e82f307c5aa9857b3d87d257d9112a7bcbef82dd205c953f76

  • Size

    37KB

  • Sample

    240908-ze7tsathml

  • MD5

    6d7bfd338fc71dedf003b58982c70143

  • SHA1

    4e17440f39f34f2a41b7fa9f76649fccc3681610

  • SHA256

    35348c86c59a86e82f307c5aa9857b3d87d257d9112a7bcbef82dd205c953f76

  • SHA512

    99d3addf725507273b0092c3ccee4705a9bfe7ffa52d18291c8a563632b252fca752063202d47a0a9d8bdacd2104635c55730ea8f1965c5e9cefe7b29431e120

  • SSDEEP

    768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATNydWK9WKF9ADJ59ADJsr:CTW7JJZENTNyoKIKMr

Malware Config

Targets

    • Target

      35348c86c59a86e82f307c5aa9857b3d87d257d9112a7bcbef82dd205c953f76

    • Size

      37KB

    • MD5

      6d7bfd338fc71dedf003b58982c70143

    • SHA1

      4e17440f39f34f2a41b7fa9f76649fccc3681610

    • SHA256

      35348c86c59a86e82f307c5aa9857b3d87d257d9112a7bcbef82dd205c953f76

    • SHA512

      99d3addf725507273b0092c3ccee4705a9bfe7ffa52d18291c8a563632b252fca752063202d47a0a9d8bdacd2104635c55730ea8f1965c5e9cefe7b29431e120

    • SSDEEP

      768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATNydWK9WKF9ADJ59ADJsr:CTW7JJZENTNyoKIKMr

    • Renames multiple (1027) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks