General

  • Target

    1dcd6701597e390990b7894102235854901e6a0a835b76982202fc895f0723bbN

  • Size

    76KB

  • Sample

    240919-hqqk7swerp

  • MD5

    4604b8d8d977128f42622320970ed9a0

  • SHA1

    20b84bb9c529c317a2461b79c97b356248922856

  • SHA256

    1dcd6701597e390990b7894102235854901e6a0a835b76982202fc895f0723bb

  • SHA512

    4619a932481d855976bf909dd4483cfc92319430b1c7382a7a86d108961cf2abe0fce2b471f8915278343d6dc2bb46f771bc7ae6f63577d86cec6464fa0393ab

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxJ:fnyiQSos

Malware Config

Targets

    • Target

      1dcd6701597e390990b7894102235854901e6a0a835b76982202fc895f0723bbN

    • Size

      76KB

    • MD5

      4604b8d8d977128f42622320970ed9a0

    • SHA1

      20b84bb9c529c317a2461b79c97b356248922856

    • SHA256

      1dcd6701597e390990b7894102235854901e6a0a835b76982202fc895f0723bb

    • SHA512

      4619a932481d855976bf909dd4483cfc92319430b1c7382a7a86d108961cf2abe0fce2b471f8915278343d6dc2bb46f771bc7ae6f63577d86cec6464fa0393ab

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxJ:fnyiQSos

    • Renames multiple (840) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks