General

  • Target

    5e6605e4443865ab374785d7b5b66c476d0e98a86237cd40dbc492a2c7647793N

  • Size

    135KB

  • Sample

    240928-bm5gma1gqf

  • MD5

    91e51fbc7f398adf98740c15942dffc0

  • SHA1

    dcb00631ed49904869a6a7840d8588747efa038e

  • SHA256

    5e6605e4443865ab374785d7b5b66c476d0e98a86237cd40dbc492a2c7647793

  • SHA512

    036ff61780385155f5df11489ec227c08d84f7c705534e8bf8d84ea2bbe102040e63fe1527f4a99a72286358351b18a768edd45b02373391023ecf244f420e66

  • SSDEEP

    1536:V7Zf/FAxTWtnMdyGdyQPQWJZ8JMl0YkBLwNoUgSEyvzNa:fnyGnarJAYktwFDbo

Malware Config

Targets

    • Target

      5e6605e4443865ab374785d7b5b66c476d0e98a86237cd40dbc492a2c7647793N

    • Size

      135KB

    • MD5

      91e51fbc7f398adf98740c15942dffc0

    • SHA1

      dcb00631ed49904869a6a7840d8588747efa038e

    • SHA256

      5e6605e4443865ab374785d7b5b66c476d0e98a86237cd40dbc492a2c7647793

    • SHA512

      036ff61780385155f5df11489ec227c08d84f7c705534e8bf8d84ea2bbe102040e63fe1527f4a99a72286358351b18a768edd45b02373391023ecf244f420e66

    • SSDEEP

      1536:V7Zf/FAxTWtnMdyGdyQPQWJZ8JMl0YkBLwNoUgSEyvzNa:fnyGnarJAYktwFDbo

    • Renames multiple (2844) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks