General

  • Target

    bdcff6eb9990edf2e001bc37f4f3f493b207305a0f17818270834fed507b938fN

  • Size

    157KB

  • Sample

    241019-zw6caa1bpq

  • MD5

    072f9480a3125910b90bb5c1412db6c0

  • SHA1

    a5ab721b6296773f6b074df2d65fbd7e8d8607d0

  • SHA256

    bdcff6eb9990edf2e001bc37f4f3f493b207305a0f17818270834fed507b938f

  • SHA512

    2f6592f23a3250c109ca013737289b901afe672f6eafd1e441e30e86bc435c2231fe71164c0ae41cf32626fbc99a395ea965333e75564c2c530390511cd05e50

  • SSDEEP

    3072:fnyiQSohsUsUKnFZtugQrp7tZJxTUtugQrp7tZJxTf:KiQSohsUs/ZtugQrp7tZJxTUtugQrp73

Malware Config

Targets

    • Target

      bdcff6eb9990edf2e001bc37f4f3f493b207305a0f17818270834fed507b938fN

    • Size

      157KB

    • MD5

      072f9480a3125910b90bb5c1412db6c0

    • SHA1

      a5ab721b6296773f6b074df2d65fbd7e8d8607d0

    • SHA256

      bdcff6eb9990edf2e001bc37f4f3f493b207305a0f17818270834fed507b938f

    • SHA512

      2f6592f23a3250c109ca013737289b901afe672f6eafd1e441e30e86bc435c2231fe71164c0ae41cf32626fbc99a395ea965333e75564c2c530390511cd05e50

    • SSDEEP

      3072:fnyiQSohsUsUKnFZtugQrp7tZJxTUtugQrp7tZJxTf:KiQSohsUs/ZtugQrp7tZJxTUtugQrp73

    • Renames multiple (3434) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks