General

  • Target

    fc7c60e552b142f3cba409cf9179b6787e375e8dec98a5147c256a1938aee2c8

  • Size

    123KB

  • Sample

    240919-ea3daazbrj

  • MD5

    06aa124fce57a87d816aa4b23bc457d3

  • SHA1

    696b463bd1051f1a77e9e104621b22476f6c61eb

  • SHA256

    fc7c60e552b142f3cba409cf9179b6787e375e8dec98a5147c256a1938aee2c8

  • SHA512

    5dbc62a5b0aa3494d98c0dc0b350a538631660e957acc31c1143979d48e193f954ffceea432ad4cf64a3d040cef80d19ac537721fb5bec58058623937f5ac479

  • SSDEEP

    1536:V7Zf/FAxTWoJJZENTBAOIfmKJfmKY7Zf/FAxTWoJJZENTBAOIfmKJfmKN:fny1tENny1tE8

Malware Config

Targets

    • Target

      fc7c60e552b142f3cba409cf9179b6787e375e8dec98a5147c256a1938aee2c8

    • Size

      123KB

    • MD5

      06aa124fce57a87d816aa4b23bc457d3

    • SHA1

      696b463bd1051f1a77e9e104621b22476f6c61eb

    • SHA256

      fc7c60e552b142f3cba409cf9179b6787e375e8dec98a5147c256a1938aee2c8

    • SHA512

      5dbc62a5b0aa3494d98c0dc0b350a538631660e957acc31c1143979d48e193f954ffceea432ad4cf64a3d040cef80d19ac537721fb5bec58058623937f5ac479

    • SSDEEP

      1536:V7Zf/FAxTWoJJZENTBAOIfmKJfmKY7Zf/FAxTWoJJZENTBAOIfmKJfmKN:fny1tENny1tE8

    • Renames multiple (4908) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks