General

  • Target

    7f5f04227d380af4b08e990c4d353509cdf233ed39ce46fb62fe40a932f26a45N

  • Size

    124KB

  • Sample

    241006-m68tyavenf

  • MD5

    ca143d6eba6dcde95745b557805c5ae0

  • SHA1

    2e9c4d9cf075f570ebacd74e64a46c8f08c7b0b0

  • SHA256

    7f5f04227d380af4b08e990c4d353509cdf233ed39ce46fb62fe40a932f26a45

  • SHA512

    6ba8174c6739243ce674d3334bdbd1a76c5a12a0fa70336538c926672c2d68e7cdf89532e4baf0fe32060c9d1ecd4ebefb7eeeb9efffad7133ffc21d3a328d07

  • SSDEEP

    1536:V7Zf/FAxTWoJJ7T3cFMOu/h6HSKX/8KX/v7Zf/FAxTWoJJ7T3cFMOu/h6HSKX/8P:fny1bcH/ny1bcHQ

Malware Config

Targets

    • Target

      7f5f04227d380af4b08e990c4d353509cdf233ed39ce46fb62fe40a932f26a45N

    • Size

      124KB

    • MD5

      ca143d6eba6dcde95745b557805c5ae0

    • SHA1

      2e9c4d9cf075f570ebacd74e64a46c8f08c7b0b0

    • SHA256

      7f5f04227d380af4b08e990c4d353509cdf233ed39ce46fb62fe40a932f26a45

    • SHA512

      6ba8174c6739243ce674d3334bdbd1a76c5a12a0fa70336538c926672c2d68e7cdf89532e4baf0fe32060c9d1ecd4ebefb7eeeb9efffad7133ffc21d3a328d07

    • SSDEEP

      1536:V7Zf/FAxTWoJJ7T3cFMOu/h6HSKX/8KX/v7Zf/FAxTWoJJ7T3cFMOu/h6HSKX/8P:fny1bcH/ny1bcHQ

    • Renames multiple (456) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks