General

  • Target

    6608ba846eb6f3f73296968f03494d1aa67dc576df07a55cd9c53cc8c99a23f1N

  • Size

    26KB

  • Sample

    241014-pcvrbszanr

  • MD5

    1f0fdfde8f581e3ed831081ebb684a30

  • SHA1

    da9cef30893811f7df8da847d352fc295e3f7a53

  • SHA256

    6608ba846eb6f3f73296968f03494d1aa67dc576df07a55cd9c53cc8c99a23f1

  • SHA512

    d8649d3e0a1e3c5b1b950d53dd4bca3b659c2330b450fe7ad3b3f3ceecfd72c0fd2c54355938c5f5cca07010d1fe7c67101c33ab44be404584ef8718ead841a0

  • SSDEEP

    384:QOlIBXDaU7CPKK0TIhfJJ1Evd5BvhzaM9mSIEvd5BvhzaM9mSsxmMxm9+95PFhlz:kBT37CPKKdJJ1EXBwzEXBwdcMcI9Jlz

Malware Config

Targets

    • Target

      6608ba846eb6f3f73296968f03494d1aa67dc576df07a55cd9c53cc8c99a23f1N

    • Size

      26KB

    • MD5

      1f0fdfde8f581e3ed831081ebb684a30

    • SHA1

      da9cef30893811f7df8da847d352fc295e3f7a53

    • SHA256

      6608ba846eb6f3f73296968f03494d1aa67dc576df07a55cd9c53cc8c99a23f1

    • SHA512

      d8649d3e0a1e3c5b1b950d53dd4bca3b659c2330b450fe7ad3b3f3ceecfd72c0fd2c54355938c5f5cca07010d1fe7c67101c33ab44be404584ef8718ead841a0

    • SSDEEP

      384:QOlIBXDaU7CPKK0TIhfJJ1Evd5BvhzaM9mSIEvd5BvhzaM9mSsxmMxm9+95PFhlz:kBT37CPKKdJJ1EXBwzEXBwdcMcI9Jlz

    • Renames multiple (3456) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks