General

  • Target

    6cececac2a5882de3adfb4c959873e02efa0ccb3555ca57e06a481cd6933287cN

  • Size

    91KB

  • Sample

    241017-2nn45stgpr

  • MD5

    bd3b6ef5f95c55e6c3782cc9b0b875a0

  • SHA1

    61cadbbc5d376d90fd1f3b7954aa5e46cbe88065

  • SHA256

    6cececac2a5882de3adfb4c959873e02efa0ccb3555ca57e06a481cd6933287c

  • SHA512

    ee27ec718473aa5462499bb76d2bc2a6317c01254594e8bdbb6a53919232c6ee1c2e0edc3eabdf83d0843fce43b28fa6385490c7cbb8b4d644353f6a4efa7586

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9woOzOuiJfoOzOuiJfOCz+NCz+NE2lGZD4TzX:CTW7JJ7T4Mg+w+M+I8K/XCKCGSqzVM

Malware Config

Targets

    • Target

      6cececac2a5882de3adfb4c959873e02efa0ccb3555ca57e06a481cd6933287cN

    • Size

      91KB

    • MD5

      bd3b6ef5f95c55e6c3782cc9b0b875a0

    • SHA1

      61cadbbc5d376d90fd1f3b7954aa5e46cbe88065

    • SHA256

      6cececac2a5882de3adfb4c959873e02efa0ccb3555ca57e06a481cd6933287c

    • SHA512

      ee27ec718473aa5462499bb76d2bc2a6317c01254594e8bdbb6a53919232c6ee1c2e0edc3eabdf83d0843fce43b28fa6385490c7cbb8b4d644353f6a4efa7586

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9woOzOuiJfoOzOuiJfOCz+NCz+NE2lGZD4TzX:CTW7JJ7T4Mg+w+M+I8K/XCKCGSqzVM

    • Renames multiple (3260) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks