General

  • Target

    29e31ebff3e8299e0a1a53264b207bf5660787b88c39b4a71b34e799c706f77c

  • Size

    21KB

  • Sample

    241112-zfevds1cmr

  • MD5

    2be14980dd897a61d98ed328c754a889

  • SHA1

    750841c68395e6f7430f25e6c639ca65a75c862f

  • SHA256

    29e31ebff3e8299e0a1a53264b207bf5660787b88c39b4a71b34e799c706f77c

  • SHA512

    68e46f023c3cbf29594b18f8fa4484b88e84b082c3dc3f7b6ef7b4ad7e7aef46136bbbfbd49d6684f25810cf50aae4fba8584c80db42e558a9484f6bbdca53d9

  • SSDEEP

    384:QOlIBXDaU7CPKK0TIhfJJcbQbf1Oti1JGBQOOiQJhAT17JZ2JWu02JWun:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJf

Malware Config

Targets

    • Target

      29e31ebff3e8299e0a1a53264b207bf5660787b88c39b4a71b34e799c706f77c

    • Size

      21KB

    • MD5

      2be14980dd897a61d98ed328c754a889

    • SHA1

      750841c68395e6f7430f25e6c639ca65a75c862f

    • SHA256

      29e31ebff3e8299e0a1a53264b207bf5660787b88c39b4a71b34e799c706f77c

    • SHA512

      68e46f023c3cbf29594b18f8fa4484b88e84b082c3dc3f7b6ef7b4ad7e7aef46136bbbfbd49d6684f25810cf50aae4fba8584c80db42e558a9484f6bbdca53d9

    • SSDEEP

      384:QOlIBXDaU7CPKK0TIhfJJcbQbf1Oti1JGBQOOiQJhAT17JZ2JWu02JWun:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJf

    • Renames multiple (4109) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks