General

  • Target

    c295a735985ba2485812a0ddc4b4dd6b5a7cc6decb896bb62e32e310bfca7fa2N

  • Size

    40KB

  • Sample

    241016-xdsblawamf

  • MD5

    a5cfd6bd052a8a08a2637475c7e0f1d0

  • SHA1

    0308e4a52a0f15560e7ff056a11859cf80e7db74

  • SHA256

    c295a735985ba2485812a0ddc4b4dd6b5a7cc6decb896bb62e32e310bfca7fa2

  • SHA512

    b0a6a602ce9c4d78fc88a15b2cafd92f17bc9863d724a3621b1d92324a2f03cbab9ce5a62ec474f8edf0e3f74fd584664162301f8cdc739f9a8327e41ad083c4

  • SSDEEP

    768:kBT37CPKK1EXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rcu90TKe+0TKeKiwlG:CTWciVRRNRRj

Malware Config

Targets

    • Target

      c295a735985ba2485812a0ddc4b4dd6b5a7cc6decb896bb62e32e310bfca7fa2N

    • Size

      40KB

    • MD5

      a5cfd6bd052a8a08a2637475c7e0f1d0

    • SHA1

      0308e4a52a0f15560e7ff056a11859cf80e7db74

    • SHA256

      c295a735985ba2485812a0ddc4b4dd6b5a7cc6decb896bb62e32e310bfca7fa2

    • SHA512

      b0a6a602ce9c4d78fc88a15b2cafd92f17bc9863d724a3621b1d92324a2f03cbab9ce5a62ec474f8edf0e3f74fd584664162301f8cdc739f9a8327e41ad083c4

    • SSDEEP

      768:kBT37CPKK1EXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rcu90TKe+0TKeKiwlG:CTWciVRRNRRj

    • Renames multiple (3276) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks