General

  • Target

    3aa12cb158e921741014412c00dbc8f1b4570220643bb3b028a81db2ed8cf232

  • Size

    67KB

  • Sample

    241005-zam9ks1hll

  • MD5

    1224238cb86d37dc42df988ea69ca311

  • SHA1

    aee3d2efc39e672f9d4f60483369733660de5c87

  • SHA256

    3aa12cb158e921741014412c00dbc8f1b4570220643bb3b028a81db2ed8cf232

  • SHA512

    a06a2bb533d4f689da81b21b1b69f08edc9a7283ab2c9407ba05127c888c9eec1cdc5225a19f09237708dc126c184e47140c49fa0d9121efe67d1f3343c9ef4b

  • SSDEEP

    1536:V7Zf/FAxTWoJJ7T3cFMOu/h6HSKX/8KX/YcL:fny1bcHn

Malware Config

Targets

    • Target

      3aa12cb158e921741014412c00dbc8f1b4570220643bb3b028a81db2ed8cf232

    • Size

      67KB

    • MD5

      1224238cb86d37dc42df988ea69ca311

    • SHA1

      aee3d2efc39e672f9d4f60483369733660de5c87

    • SHA256

      3aa12cb158e921741014412c00dbc8f1b4570220643bb3b028a81db2ed8cf232

    • SHA512

      a06a2bb533d4f689da81b21b1b69f08edc9a7283ab2c9407ba05127c888c9eec1cdc5225a19f09237708dc126c184e47140c49fa0d9121efe67d1f3343c9ef4b

    • SSDEEP

      1536:V7Zf/FAxTWoJJ7T3cFMOu/h6HSKX/8KX/YcL:fny1bcHn

    • Renames multiple (3667) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks