General

  • Target

    f84d636501d89790135f312d420dee0f1373738df47096d75265ddfa4849cf4dN

  • Size

    53KB

  • Sample

    241016-vfxyravbkp

  • MD5

    216b9ed25791f77fcbb36a3be5a598b0

  • SHA1

    6aa113924d95fdd05140ecc585c33e6dd7e81d2b

  • SHA256

    f84d636501d89790135f312d420dee0f1373738df47096d75265ddfa4849cf4d

  • SHA512

    0957bf5535591e33205f818ebf6b8a80b0f0e1e94d95b63b59d3f40ee5e68b6e01eda879d17a23616162c89d5ed4dff688edd1bc66724cd7e553a23a19575c25

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9Y96BT37CPKKdJJ1EXBwzEXBwdcMcI9Y9C:CTW7JJ7T9TW7JJ7T/

Malware Config

Targets

    • Target

      f84d636501d89790135f312d420dee0f1373738df47096d75265ddfa4849cf4dN

    • Size

      53KB

    • MD5

      216b9ed25791f77fcbb36a3be5a598b0

    • SHA1

      6aa113924d95fdd05140ecc585c33e6dd7e81d2b

    • SHA256

      f84d636501d89790135f312d420dee0f1373738df47096d75265ddfa4849cf4d

    • SHA512

      0957bf5535591e33205f818ebf6b8a80b0f0e1e94d95b63b59d3f40ee5e68b6e01eda879d17a23616162c89d5ed4dff688edd1bc66724cd7e553a23a19575c25

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9Y96BT37CPKKdJJ1EXBwzEXBwdcMcI9Y9C:CTW7JJ7T9TW7JJ7T/

    • Renames multiple (3772) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks