General

  • Target

    66066dee3c39ef7dfe7a44ce16caeda0ff028b5dbe3dde69040d855f4e538abf

  • Size

    104KB

  • Sample

    241017-2mzjgs1djf

  • MD5

    1f456c27b740918c22a2d16219b708da

  • SHA1

    4dc236b0feb3a5886b61e3a3c12c1a8430005dab

  • SHA256

    66066dee3c39ef7dfe7a44ce16caeda0ff028b5dbe3dde69040d855f4e538abf

  • SHA512

    46acabedac1fe99db112c30dd08f72aaa31774f43ef796ccc0b0a43dcb869a20439735ce03de184122e017d2712a0b1aa6eb538869843698318254fd694d4298

  • SSDEEP

    1536:V7Zf/FAxTWoJJ7Tu7Zf/FAxTWoJJ7TAPS:fny1Wny1R

Malware Config

Targets

    • Target

      66066dee3c39ef7dfe7a44ce16caeda0ff028b5dbe3dde69040d855f4e538abf

    • Size

      104KB

    • MD5

      1f456c27b740918c22a2d16219b708da

    • SHA1

      4dc236b0feb3a5886b61e3a3c12c1a8430005dab

    • SHA256

      66066dee3c39ef7dfe7a44ce16caeda0ff028b5dbe3dde69040d855f4e538abf

    • SHA512

      46acabedac1fe99db112c30dd08f72aaa31774f43ef796ccc0b0a43dcb869a20439735ce03de184122e017d2712a0b1aa6eb538869843698318254fd694d4298

    • SSDEEP

      1536:V7Zf/FAxTWoJJ7Tu7Zf/FAxTWoJJ7TAPS:fny1Wny1R

    • Renames multiple (5152) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks