General

  • Target

    dc782c052558ba75cad076cc61d3dbd0N

  • Size

    91KB

  • Sample

    240913-k8cheawdmg

  • MD5

    dc782c052558ba75cad076cc61d3dbd0

  • SHA1

    8302262a191ab7fc6f6672ffd82597842cb0b6a4

  • SHA256

    9363248b7e16bcd65e385a5d8641fe2b15e37e6e99c38b55de93298c353abdcf

  • SHA512

    449a88821f7e328bdc413beae1128ee31b59de08e75b605ef56c6bca06a8c270d0cf61a6191e3d1ab019a98925fe12ffc7697dc1979ba1a420abc60d72a9a103

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxY5NKZDLKZDE:fnyiQSox5WDgDE

Malware Config

Targets

    • Target

      dc782c052558ba75cad076cc61d3dbd0N

    • Size

      91KB

    • MD5

      dc782c052558ba75cad076cc61d3dbd0

    • SHA1

      8302262a191ab7fc6f6672ffd82597842cb0b6a4

    • SHA256

      9363248b7e16bcd65e385a5d8641fe2b15e37e6e99c38b55de93298c353abdcf

    • SHA512

      449a88821f7e328bdc413beae1128ee31b59de08e75b605ef56c6bca06a8c270d0cf61a6191e3d1ab019a98925fe12ffc7697dc1979ba1a420abc60d72a9a103

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxY5NKZDLKZDE:fnyiQSox5WDgDE

    • Renames multiple (2898) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks