Resubmissions

07-10-2024 22:14

241007-15yt8szcjg 9

07-10-2024 21:32

241007-1d5hpsycmc 9

General

  • Target

    https://drive.google.com/drive/folders/1sNLbiR1dxFmbsNJHNMsi0c1wBHsBAX77?usp=drive_link

  • Sample

    241007-15yt8szcjg

Malware Config

Targets

    • Target

      https://drive.google.com/drive/folders/1sNLbiR1dxFmbsNJHNMsi0c1wBHsBAX77?usp=drive_link

    • Renames multiple (151) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks