General

  • Target

    a4915aa3e70e46a5803f0d33a01814d1b2ccc8dab3e8b96f5c0718a5e1f37295N

  • Size

    37KB

  • Sample

    240918-kzm8jstbmp

  • MD5

    1e05d943e0cf193cdd130edc3543bf10

  • SHA1

    8ee9da7cf94a2b91c06a3019a2633b0173394893

  • SHA256

    a4915aa3e70e46a5803f0d33a01814d1b2ccc8dab3e8b96f5c0718a5e1f37295

  • SHA512

    ae3957fb60cf6986203802289b5b79a87ec4a9f0e38a9650e73846553101168dfc05feb302df8f541125bb5030459682b04d8aa77dfb0bf75527f124a39c12d9

  • SSDEEP

    768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATNyHF/MF/6m0mdGRGLzq:CTW7JJZENTNyl2Sm0mC

Malware Config

Targets

    • Target

      a4915aa3e70e46a5803f0d33a01814d1b2ccc8dab3e8b96f5c0718a5e1f37295N

    • Size

      37KB

    • MD5

      1e05d943e0cf193cdd130edc3543bf10

    • SHA1

      8ee9da7cf94a2b91c06a3019a2633b0173394893

    • SHA256

      a4915aa3e70e46a5803f0d33a01814d1b2ccc8dab3e8b96f5c0718a5e1f37295

    • SHA512

      ae3957fb60cf6986203802289b5b79a87ec4a9f0e38a9650e73846553101168dfc05feb302df8f541125bb5030459682b04d8aa77dfb0bf75527f124a39c12d9

    • SSDEEP

      768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATNyHF/MF/6m0mdGRGLzq:CTW7JJZENTNyl2Sm0mC

    • Renames multiple (3391) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks