General

  • Target

    39b19cdb1905721003e52ca36337469478b9f9da45162fa8a5ed2bf7175c793fN

  • Size

    1.1MB

  • Sample

    240921-v5pzfavarg

  • MD5

    40c0b8a323d7fe4344dcc73d57abaa30

  • SHA1

    5ecbfdda59d4fae489445becf6ca13425e001805

  • SHA256

    39b19cdb1905721003e52ca36337469478b9f9da45162fa8a5ed2bf7175c793f

  • SHA512

    2cf8e0bd8ac35bd73849f3fee14bd3f19f69adad165f1e953faea92d16641cf87bfd70dc89989e90f97d801c0411ad74f300eaa069a2540611bb699f8b6c45d9

  • SSDEEP

    12288:VQthsUsM+BDfhmzLnyO/j1/tUSpknOVxsgZWgX:VIX+BDfhmzLnDkSpknOVxsgZWS

Malware Config

Targets

    • Target

      39b19cdb1905721003e52ca36337469478b9f9da45162fa8a5ed2bf7175c793fN

    • Size

      1.1MB

    • MD5

      40c0b8a323d7fe4344dcc73d57abaa30

    • SHA1

      5ecbfdda59d4fae489445becf6ca13425e001805

    • SHA256

      39b19cdb1905721003e52ca36337469478b9f9da45162fa8a5ed2bf7175c793f

    • SHA512

      2cf8e0bd8ac35bd73849f3fee14bd3f19f69adad165f1e953faea92d16641cf87bfd70dc89989e90f97d801c0411ad74f300eaa069a2540611bb699f8b6c45d9

    • SSDEEP

      12288:VQthsUsM+BDfhmzLnyO/j1/tUSpknOVxsgZWgX:VIX+BDfhmzLnDkSpknOVxsgZWS

    • Renames multiple (506) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks