General

  • Target

    fcea2f1d7658afdeb2eea93946247edc699d54e43c418ffd54690e0ec8b62784N

  • Size

    202KB

  • Sample

    240919-d32rsayemd

  • MD5

    92afcbea7589aa96de3fbccdae868220

  • SHA1

    28da4cbcae1f916663b7943270bc8bd255158f70

  • SHA256

    fcea2f1d7658afdeb2eea93946247edc699d54e43c418ffd54690e0ec8b62784

  • SHA512

    935f6c9d748630529cb389743ad59102f9b03172a2a0fa9c840d104737c23c3ee485212199e9215289c72dc8ee5fdcb98908d7245074077b224d3fa1dfa61bb5

  • SSDEEP

    3072:enaypQSoHGQcYRCDMlYZyfHg65wgvUQZLeeWfQWL41/:wHpQSo7A2A4vUAeeW9k/

Malware Config

Targets

    • Target

      fcea2f1d7658afdeb2eea93946247edc699d54e43c418ffd54690e0ec8b62784N

    • Size

      202KB

    • MD5

      92afcbea7589aa96de3fbccdae868220

    • SHA1

      28da4cbcae1f916663b7943270bc8bd255158f70

    • SHA256

      fcea2f1d7658afdeb2eea93946247edc699d54e43c418ffd54690e0ec8b62784

    • SHA512

      935f6c9d748630529cb389743ad59102f9b03172a2a0fa9c840d104737c23c3ee485212199e9215289c72dc8ee5fdcb98908d7245074077b224d3fa1dfa61bb5

    • SSDEEP

      3072:enaypQSoHGQcYRCDMlYZyfHg65wgvUQZLeeWfQWL41/:wHpQSo7A2A4vUAeeW9k/

    • Renames multiple (2696) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks