General

  • Target

    0e901a3e681797c2dd03c7f776d010c341bd7a95eea451eaa9a7c05a4dfba195N

  • Size

    25KB

  • Sample

    240919-g9ahnavgqp

  • MD5

    9530aa266e909ed54d97446b13bfdd80

  • SHA1

    e810788c571ccd3291808586f02a0259cec8fe56

  • SHA256

    0e901a3e681797c2dd03c7f776d010c341bd7a95eea451eaa9a7c05a4dfba195

  • SHA512

    373cf6b7ebcc81df68d926e593a183d862f789b023babf7713900bdac03d3c8ec6bc2d2eeb5bf0073c097a952e8f48efe446bf22b681e4a06a96be63a100a59f

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9KY1YI:CTW7JJ7Tt

Malware Config

Targets

    • Target

      0e901a3e681797c2dd03c7f776d010c341bd7a95eea451eaa9a7c05a4dfba195N

    • Size

      25KB

    • MD5

      9530aa266e909ed54d97446b13bfdd80

    • SHA1

      e810788c571ccd3291808586f02a0259cec8fe56

    • SHA256

      0e901a3e681797c2dd03c7f776d010c341bd7a95eea451eaa9a7c05a4dfba195

    • SHA512

      373cf6b7ebcc81df68d926e593a183d862f789b023babf7713900bdac03d3c8ec6bc2d2eeb5bf0073c097a952e8f48efe446bf22b681e4a06a96be63a100a59f

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9KY1YI:CTW7JJ7Tt

    • Renames multiple (4195) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks