General

  • Target

    8483e47badd201418a4de45affd18166eeb375552ee685981de538ec4cdb960bN

  • Size

    95KB

  • Sample

    240919-dlkf6sxfnh

  • MD5

    488cadcf386827bae606577162da3dc0

  • SHA1

    96a73b95c00df4d9826b3b6b414f8cfdd8696221

  • SHA256

    8483e47badd201418a4de45affd18166eeb375552ee685981de538ec4cdb960b

  • SHA512

    619c1386677957b5375e439ec5e4eada3403932e6d8a22662048ec6ac56709bb7f399bd22de259ed667425bfb1d3ebebcd05cfd8a875ee4ef094415841efe268

  • SSDEEP

    1536:CTWUnMdyGdy4AnAJYq8YquTWUnMdyGdy4AnAJYq8YqE:SnpAekLnpAekz

Malware Config

Targets

    • Target

      8483e47badd201418a4de45affd18166eeb375552ee685981de538ec4cdb960bN

    • Size

      95KB

    • MD5

      488cadcf386827bae606577162da3dc0

    • SHA1

      96a73b95c00df4d9826b3b6b414f8cfdd8696221

    • SHA256

      8483e47badd201418a4de45affd18166eeb375552ee685981de538ec4cdb960b

    • SHA512

      619c1386677957b5375e439ec5e4eada3403932e6d8a22662048ec6ac56709bb7f399bd22de259ed667425bfb1d3ebebcd05cfd8a875ee4ef094415841efe268

    • SSDEEP

      1536:CTWUnMdyGdy4AnAJYq8YquTWUnMdyGdy4AnAJYq8YqE:SnpAekLnpAekz

    • Renames multiple (4816) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks