General

  • Target

    16312f195c5eb5b80707ad0e1682813b6fae44fd1d0b1219aa0fcee50592fef0

  • Size

    42KB

  • Sample

    241005-xs25cazckn

  • MD5

    7cb38f277268864a3e5c0b5f2604287c

  • SHA1

    abf6f07ca072af7904a1d49e7f1e8a8cf851b7cc

  • SHA256

    16312f195c5eb5b80707ad0e1682813b6fae44fd1d0b1219aa0fcee50592fef0

  • SHA512

    a139f49645711d79449afeed9377f38d6e97a4b96a8855550ffe29d66a58e11b90f7c7c5b8745c8f12be38e89ca484e7f0e58330fcf2abfc3b0491c7f5ff2815

  • SSDEEP

    768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATBApwp133EskmKsN33EskmKsKb7hZ/p:CTW7JJZENTBAOIfmKJfmKxZ/D5zf6ydP

Malware Config

Targets

    • Target

      16312f195c5eb5b80707ad0e1682813b6fae44fd1d0b1219aa0fcee50592fef0

    • Size

      42KB

    • MD5

      7cb38f277268864a3e5c0b5f2604287c

    • SHA1

      abf6f07ca072af7904a1d49e7f1e8a8cf851b7cc

    • SHA256

      16312f195c5eb5b80707ad0e1682813b6fae44fd1d0b1219aa0fcee50592fef0

    • SHA512

      a139f49645711d79449afeed9377f38d6e97a4b96a8855550ffe29d66a58e11b90f7c7c5b8745c8f12be38e89ca484e7f0e58330fcf2abfc3b0491c7f5ff2815

    • SSDEEP

      768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATBApwp133EskmKsN33EskmKsKb7hZ/p:CTW7JJZENTBAOIfmKJfmKxZ/D5zf6ydP

    • Renames multiple (3767) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks