General

  • Target

    6fdeecbe4a703ae8c9ba0187ffebd7a55ade89cca8d5c251d845ac32900dec2bN

  • Size

    25KB

  • Sample

    240919-g2ywaavbrg

  • MD5

    b046c2b0869b17d855062e0a6f0392a0

  • SHA1

    bef96b677c2dc0a25099e074a9af7a3a44c336fc

  • SHA256

    6fdeecbe4a703ae8c9ba0187ffebd7a55ade89cca8d5c251d845ac32900dec2b

  • SHA512

    df819ccf578f77eba244c11dfc2c924915f8564bfccc4918ac172902cbd04de9fbd42ef3cfe38c5edcc21856bc0b032372d81333be291551d584e3d827668cd6

  • SSDEEP

    384:QOlIBXDaU7CPKK0TIhfJJ1Evd5BvhzaM9mSIEvd5BvhzaM9mSsxmMxm9+9T6u77:kBT37CPKKdJJ1EXBwzEXBwdcMcI9p77

Malware Config

Targets

    • Target

      6fdeecbe4a703ae8c9ba0187ffebd7a55ade89cca8d5c251d845ac32900dec2bN

    • Size

      25KB

    • MD5

      b046c2b0869b17d855062e0a6f0392a0

    • SHA1

      bef96b677c2dc0a25099e074a9af7a3a44c336fc

    • SHA256

      6fdeecbe4a703ae8c9ba0187ffebd7a55ade89cca8d5c251d845ac32900dec2b

    • SHA512

      df819ccf578f77eba244c11dfc2c924915f8564bfccc4918ac172902cbd04de9fbd42ef3cfe38c5edcc21856bc0b032372d81333be291551d584e3d827668cd6

    • SSDEEP

      384:QOlIBXDaU7CPKK0TIhfJJ1Evd5BvhzaM9mSIEvd5BvhzaM9mSsxmMxm9+9T6u77:kBT37CPKKdJJ1EXBwzEXBwdcMcI9p77

    • Renames multiple (3450) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks