General

  • Target

    exe006.exe

  • Size

    60KB

  • Sample

    241119-m84yrsvmbt

  • MD5

    35ded83a665e00296e6f3cc76bb19de0

  • SHA1

    265a71bccce2d379959fcc0fdc905930f8affee7

  • SHA256

    2bf0b568da5437571fe0536aee7d05697e00557eff084d754107398d2a690290

  • SHA512

    476a257ea935cd7d9365330e04b2ea10df7e0b93ee769a2f08009eb87b605dcebc5f7288d0cfa7d2d68ede23bec1243eb049008c8bd67a5bb55efe89ff6c8e58

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATBHfBo8o3PV15RT:V7Zf/FAxTWoJJZENTBHfiP3zUuIun

Malware Config

Targets

    • Target

      exe006.exe

    • Size

      60KB

    • MD5

      35ded83a665e00296e6f3cc76bb19de0

    • SHA1

      265a71bccce2d379959fcc0fdc905930f8affee7

    • SHA256

      2bf0b568da5437571fe0536aee7d05697e00557eff084d754107398d2a690290

    • SHA512

      476a257ea935cd7d9365330e04b2ea10df7e0b93ee769a2f08009eb87b605dcebc5f7288d0cfa7d2d68ede23bec1243eb049008c8bd67a5bb55efe89ff6c8e58

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATBHfBo8o3PV15RT:V7Zf/FAxTWoJJZENTBHfiP3zUuIun

    • Renames multiple (3266) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks