General

  • Target

    f6b73935d5162b8e2165825e96a2040f2e848679167b8061354d8747ee05a4e1

  • Size

    1.3MB

  • Sample

    241121-pyxstawqgj

  • MD5

    5d274fbfaed201de674cdd70e70e7779

  • SHA1

    95dcb4ef57f0e9528a43cc3b8eae6e41447a0163

  • SHA256

    f6b73935d5162b8e2165825e96a2040f2e848679167b8061354d8747ee05a4e1

  • SHA512

    6f6209d625bf7497399eeaa1002aef680dcaa87db9b1b3ac2a9dde7118e24dad93e1611896b65d908004955d6f6721624d48ee918ccc1edef770367ed53bf1ac

  • SSDEEP

    1536:V7Zf/FAxTWoJJZENTBHfiPVi0HeopwaB1ssTmaNNT5IG6TKpfbUyY72XT82vaFe:fny1tEMirN4

Malware Config

Targets

    • Target

      f6b73935d5162b8e2165825e96a2040f2e848679167b8061354d8747ee05a4e1

    • Size

      1.3MB

    • MD5

      5d274fbfaed201de674cdd70e70e7779

    • SHA1

      95dcb4ef57f0e9528a43cc3b8eae6e41447a0163

    • SHA256

      f6b73935d5162b8e2165825e96a2040f2e848679167b8061354d8747ee05a4e1

    • SHA512

      6f6209d625bf7497399eeaa1002aef680dcaa87db9b1b3ac2a9dde7118e24dad93e1611896b65d908004955d6f6721624d48ee918ccc1edef770367ed53bf1ac

    • SSDEEP

      1536:V7Zf/FAxTWoJJZENTBHfiPVi0HeopwaB1ssTmaNNT5IG6TKpfbUyY72XT82vaFe:fny1tEMirN4

    • Renames multiple (395) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks