General

  • Target

    539a7cf275007508dcbb0e799274db10427298d4ea22e505db252f770f064c6fN

  • Size

    39KB

  • Sample

    241016-x1kv2a1enp

  • MD5

    f00a3bf76691aafc97e92bac0fee0f80

  • SHA1

    56ca289e65e9597bede88ce87d5a138f7b8d8b2a

  • SHA256

    539a7cf275007508dcbb0e799274db10427298d4ea22e505db252f770f064c6f

  • SHA512

    f6c98b6d056907dbba021199f422150ab7d34617b7a21f7b0f918d56cd577e3a888c7342fb0662a9406ffff76a7f93d39941c8fc819bc5ddd3d1e69283659318

  • SSDEEP

    768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATBHfBo8o3PxSAJx4AJxVSAJx4AJxK:CTW7JJZENTBHfiP+

Malware Config

Targets

    • Target

      539a7cf275007508dcbb0e799274db10427298d4ea22e505db252f770f064c6fN

    • Size

      39KB

    • MD5

      f00a3bf76691aafc97e92bac0fee0f80

    • SHA1

      56ca289e65e9597bede88ce87d5a138f7b8d8b2a

    • SHA256

      539a7cf275007508dcbb0e799274db10427298d4ea22e505db252f770f064c6f

    • SHA512

      f6c98b6d056907dbba021199f422150ab7d34617b7a21f7b0f918d56cd577e3a888c7342fb0662a9406ffff76a7f93d39941c8fc819bc5ddd3d1e69283659318

    • SSDEEP

      768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATBHfBo8o3PxSAJx4AJxVSAJx4AJxK:CTW7JJZENTBHfiP+

    • Renames multiple (3379) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks