General

  • Target

    85c1f988d5e19648aad3530371f5f1608baeb1d2bd494c7eebdda6afc85e2962N

  • Size

    25KB

  • Sample

    240919-gebr8stckd

  • MD5

    8e28d8c6c87b1fd508efd2791e0e10a0

  • SHA1

    9bb7491cafbce278f13b1ed7e189a10b2a3746cb

  • SHA256

    85c1f988d5e19648aad3530371f5f1608baeb1d2bd494c7eebdda6afc85e2962

  • SHA512

    5e6a2304ee3de16baa2c835149690d3110ea095d86f1f98576978a756689270c8feee423b6dbdd9c2b85ec1497dece1c1364b9ea2b09a5fbc669bd8a5fe62c4d

  • SSDEEP

    384:QOlIBXDaU7CPKK0TIhfJJ1Evd5BvhzaM9mSIEvd5BvhzaM9mSsxmMxm9+9s+uA+S:kBT37CPKKdJJ1EXBwzEXBwdcMcI97yS

Malware Config

Targets

    • Target

      85c1f988d5e19648aad3530371f5f1608baeb1d2bd494c7eebdda6afc85e2962N

    • Size

      25KB

    • MD5

      8e28d8c6c87b1fd508efd2791e0e10a0

    • SHA1

      9bb7491cafbce278f13b1ed7e189a10b2a3746cb

    • SHA256

      85c1f988d5e19648aad3530371f5f1608baeb1d2bd494c7eebdda6afc85e2962

    • SHA512

      5e6a2304ee3de16baa2c835149690d3110ea095d86f1f98576978a756689270c8feee423b6dbdd9c2b85ec1497dece1c1364b9ea2b09a5fbc669bd8a5fe62c4d

    • SSDEEP

      384:QOlIBXDaU7CPKK0TIhfJJ1Evd5BvhzaM9mSIEvd5BvhzaM9mSsxmMxm9+9s+uA+S:kBT37CPKKdJJ1EXBwzEXBwdcMcI97yS

    • Renames multiple (511) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks