General

  • Target

    7e49bd6724c0e4c284df81fdf36aa489fa40ba067bdcc6490ac67bff56d0aeb4N

  • Size

    44KB

  • Sample

    240919-l9nshatenp

  • MD5

    4149751ae26a004c95d6841b069f4fa0

  • SHA1

    6ec348e3d916f7c7f92dbafcd0e65496a5f782c9

  • SHA256

    7e49bd6724c0e4c284df81fdf36aa489fa40ba067bdcc6490ac67bff56d0aeb4

  • SHA512

    601154af104b4c2e9b17e00751ec3dd270c6d553d835e1833ceac07333dbde083035d61d87821cf34020b49ac552b3f2e5827972d1634611be88d4ced56fd8bf

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcwBcCBcw/tio/tiFn4rPK8WKnFIMK8WKnFIsoMe:CTW7JJ7TTQoQgKNKnF3KNKnFJIt

Malware Config

Targets

    • Target

      7e49bd6724c0e4c284df81fdf36aa489fa40ba067bdcc6490ac67bff56d0aeb4N

    • Size

      44KB

    • MD5

      4149751ae26a004c95d6841b069f4fa0

    • SHA1

      6ec348e3d916f7c7f92dbafcd0e65496a5f782c9

    • SHA256

      7e49bd6724c0e4c284df81fdf36aa489fa40ba067bdcc6490ac67bff56d0aeb4

    • SHA512

      601154af104b4c2e9b17e00751ec3dd270c6d553d835e1833ceac07333dbde083035d61d87821cf34020b49ac552b3f2e5827972d1634611be88d4ced56fd8bf

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcwBcCBcw/tio/tiFn4rPK8WKnFIMK8WKnFIsoMe:CTW7JJ7TTQoQgKNKnF3KNKnFJIt

    • Renames multiple (3422) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks