General

  • Target

    582546686ed7ee96558d41546fdf789e0b264a7deb5a179ab186f9d0733c7dcd

  • Size

    40KB

  • Sample

    240918-1s53savekh

  • MD5

    c73228124ad5516b9113657e655d5d5d

  • SHA1

    4efc6202f198c4bc775869a3b869da63c3905a93

  • SHA256

    582546686ed7ee96558d41546fdf789e0b264a7deb5a179ab186f9d0733c7dcd

  • SHA512

    8c2d8f465d8ae5e36f8e93a0946e05911edc698210b5597ee07e6f34dac52ed2334095556b33a997405b7d138ec8380216a1727037ecce96228dde6131b67ec9

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcwBcCBcw/tio/tiV:CTW7JJ7TTQoQV

Malware Config

Targets

    • Target

      582546686ed7ee96558d41546fdf789e0b264a7deb5a179ab186f9d0733c7dcd

    • Size

      40KB

    • MD5

      c73228124ad5516b9113657e655d5d5d

    • SHA1

      4efc6202f198c4bc775869a3b869da63c3905a93

    • SHA256

      582546686ed7ee96558d41546fdf789e0b264a7deb5a179ab186f9d0733c7dcd

    • SHA512

      8c2d8f465d8ae5e36f8e93a0946e05911edc698210b5597ee07e6f34dac52ed2334095556b33a997405b7d138ec8380216a1727037ecce96228dde6131b67ec9

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcwBcCBcw/tio/tiV:CTW7JJ7TTQoQV

    • Renames multiple (3813) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks