General

  • Target

    ad5b82c8d9f9090357319132ba2886fa5437cf695afd5e17d4ffcfe115c2d38e

  • Size

    75KB

  • Sample

    241003-ybwrnsshjk

  • MD5

    1d6038b953b159404b49ffb58736d7bb

  • SHA1

    ad48cbbf5f521b73de2443ddcb1727352947dca5

  • SHA256

    ad5b82c8d9f9090357319132ba2886fa5437cf695afd5e17d4ffcfe115c2d38e

  • SHA512

    4ef899a66a520f36258416875b4009079b23e97abeb0374277d3732af7a72d5d52a8d34d76b83d9d14cf3e2e54533ffab52b0a8390a5a9e10dae37b97c76654f

  • SSDEEP

    1536:V7Zf/FAxTWxOmO/fxRfxykK3ZUkK3ZKYMLwL+:fny+Tuf7fs62LwL+

Malware Config

Targets

    • Target

      ad5b82c8d9f9090357319132ba2886fa5437cf695afd5e17d4ffcfe115c2d38e

    • Size

      75KB

    • MD5

      1d6038b953b159404b49ffb58736d7bb

    • SHA1

      ad48cbbf5f521b73de2443ddcb1727352947dca5

    • SHA256

      ad5b82c8d9f9090357319132ba2886fa5437cf695afd5e17d4ffcfe115c2d38e

    • SHA512

      4ef899a66a520f36258416875b4009079b23e97abeb0374277d3732af7a72d5d52a8d34d76b83d9d14cf3e2e54533ffab52b0a8390a5a9e10dae37b97c76654f

    • SSDEEP

      1536:V7Zf/FAxTWxOmO/fxRfxykK3ZUkK3ZKYMLwL+:fny+Tuf7fs62LwL+

    • Renames multiple (556) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks