General

  • Target

    dcb5dd6daea8df5cc42138b0df06c2d5f7f80b8a0aa2f2aa4fc5456b8ab5c8c6.exe

  • Size

    57KB

  • Sample

    241005-xk2tlsthqa

  • MD5

    18949accf72d2d436cce85b0bfd2e2bf

  • SHA1

    fbb1c5baf1c53b412f511e9b73b601bd6fb13fc2

  • SHA256

    dcb5dd6daea8df5cc42138b0df06c2d5f7f80b8a0aa2f2aa4fc5456b8ab5c8c6

  • SHA512

    eb318378ba336e12a12b086b748fa0497cf6c0c5c60c0c874b4a2b1bc0106a32f3aac32489dcf0f2897883008a1c8257ae61bc20ab7aa812f8b718a332d80401

  • SSDEEP

    768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFzI:CTWn1++PJHJXA/OsIZfzc3/Q8zxY5L

Malware Config

Targets

    • Target

      dcb5dd6daea8df5cc42138b0df06c2d5f7f80b8a0aa2f2aa4fc5456b8ab5c8c6.exe

    • Size

      57KB

    • MD5

      18949accf72d2d436cce85b0bfd2e2bf

    • SHA1

      fbb1c5baf1c53b412f511e9b73b601bd6fb13fc2

    • SHA256

      dcb5dd6daea8df5cc42138b0df06c2d5f7f80b8a0aa2f2aa4fc5456b8ab5c8c6

    • SHA512

      eb318378ba336e12a12b086b748fa0497cf6c0c5c60c0c874b4a2b1bc0106a32f3aac32489dcf0f2897883008a1c8257ae61bc20ab7aa812f8b718a332d80401

    • SSDEEP

      768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFzI:CTWn1++PJHJXA/OsIZfzc3/Q8zxY5L

    • Renames multiple (3756) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks