General

  • Target

    ed34964815b8e46d95140afa6aab699ce39e7fc045d18b7db60b8641383fc48d

  • Size

    62KB

  • Sample

    240919-dnfwrsxglh

  • MD5

    2df1f8136098b8ca932651668f30337e

  • SHA1

    f9882c84da091658f3826108e2be6cb027de2238

  • SHA256

    ed34964815b8e46d95140afa6aab699ce39e7fc045d18b7db60b8641383fc48d

  • SHA512

    aee0b19ea2f58b05fd32c56cb2713e5ceba27928c129287add7ffad5bfbc923605f585e9a7bd6111432c8fcae61cf1571e922f692306fe20b56b8609498528d4

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9Fa:V7Zf/FAxTWoJJ7THa

Malware Config

Targets

    • Target

      ed34964815b8e46d95140afa6aab699ce39e7fc045d18b7db60b8641383fc48d

    • Size

      62KB

    • MD5

      2df1f8136098b8ca932651668f30337e

    • SHA1

      f9882c84da091658f3826108e2be6cb027de2238

    • SHA256

      ed34964815b8e46d95140afa6aab699ce39e7fc045d18b7db60b8641383fc48d

    • SHA512

      aee0b19ea2f58b05fd32c56cb2713e5ceba27928c129287add7ffad5bfbc923605f585e9a7bd6111432c8fcae61cf1571e922f692306fe20b56b8609498528d4

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9Fa:V7Zf/FAxTWoJJ7THa

    • Renames multiple (3670) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks