General

  • Target

    06288c3020041242d2820517b99d25e94ce56cd76467719ffb27dfc97a8ecaadN

  • Size

    32KB

  • Sample

    240919-g1tj6svbna

  • MD5

    6bac3535f1004db638941af594a2af50

  • SHA1

    f3782f2e1a8d39fd85cba1ee8922194f08e581ba

  • SHA256

    06288c3020041242d2820517b99d25e94ce56cd76467719ffb27dfc97a8ecaad

  • SHA512

    51cb44ba66dbc5b9c65b95ed5411738028c19befa2034d6f4a2d09590a8a3a76dfaedceb9550794e3785459592a372a172bb6f73b8bbb76edefbb879db2429ec

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9dUZJZv:CTW7JJ7Tynv

Malware Config

Targets

    • Target

      06288c3020041242d2820517b99d25e94ce56cd76467719ffb27dfc97a8ecaadN

    • Size

      32KB

    • MD5

      6bac3535f1004db638941af594a2af50

    • SHA1

      f3782f2e1a8d39fd85cba1ee8922194f08e581ba

    • SHA256

      06288c3020041242d2820517b99d25e94ce56cd76467719ffb27dfc97a8ecaad

    • SHA512

      51cb44ba66dbc5b9c65b95ed5411738028c19befa2034d6f4a2d09590a8a3a76dfaedceb9550794e3785459592a372a172bb6f73b8bbb76edefbb879db2429ec

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9dUZJZv:CTW7JJ7Tynv

    • Renames multiple (4115) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks