General

  • Target

    983b802ca6c7af6a101256521d072b558582f0d39178c767926897f2505def5eN

  • Size

    96KB

  • Sample

    241019-12vy6sterr

  • MD5

    7077abbe734bcafab4f10f9d542868c0

  • SHA1

    8c122616faeec7ef3f2fad23b802d5420da92886

  • SHA256

    983b802ca6c7af6a101256521d072b558582f0d39178c767926897f2505def5e

  • SHA512

    3661c1265de48380fb7cc3e65541944148dc5a00d2f4355d26e1f30f4520040e9f285917bbcc04a1fdced0f81aa67edfc2a4d2005afdfd533c64bd8590dbf8e9

  • SSDEEP

    1536:CTW7JJ7TTQoQPyvFUgCEHixUPig1juYoY:hoRZgYxWHb

Malware Config

Targets

    • Target

      983b802ca6c7af6a101256521d072b558582f0d39178c767926897f2505def5eN

    • Size

      96KB

    • MD5

      7077abbe734bcafab4f10f9d542868c0

    • SHA1

      8c122616faeec7ef3f2fad23b802d5420da92886

    • SHA256

      983b802ca6c7af6a101256521d072b558582f0d39178c767926897f2505def5e

    • SHA512

      3661c1265de48380fb7cc3e65541944148dc5a00d2f4355d26e1f30f4520040e9f285917bbcc04a1fdced0f81aa67edfc2a4d2005afdfd533c64bd8590dbf8e9

    • SSDEEP

      1536:CTW7JJ7TTQoQPyvFUgCEHixUPig1juYoY:hoRZgYxWHb

    • Renames multiple (3272) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks