General

  • Target

    69089c1681858c90005ef609a7ad9a00N.exe

  • Size

    87KB

  • Sample

    240724-klg5daxbpr

  • MD5

    69089c1681858c90005ef609a7ad9a00

  • SHA1

    ca28ea0487b92c13e3a3f1b5862e0cd645b4b422

  • SHA256

    345a42628df3673e3108d03c44c5a5995d6e00d4da72a30ecda4288122b2d465

  • SHA512

    65695b5da0610e155a47977a68dba491e0e44d9133807046e8500ef619e5cc9a01d10ea6b402a6d6a33a2b059ceb4973c0f6a895cec093c887c7bfe5c8e2449c

  • SSDEEP

    1536:a7ZyqaFAxTWH1++PJHJXA/OsIZfzc3/Q8VCnXxX81M4c6i:enaypQSoPXxX3

Malware Config

Targets

    • Target

      69089c1681858c90005ef609a7ad9a00N.exe

    • Size

      87KB

    • MD5

      69089c1681858c90005ef609a7ad9a00

    • SHA1

      ca28ea0487b92c13e3a3f1b5862e0cd645b4b422

    • SHA256

      345a42628df3673e3108d03c44c5a5995d6e00d4da72a30ecda4288122b2d465

    • SHA512

      65695b5da0610e155a47977a68dba491e0e44d9133807046e8500ef619e5cc9a01d10ea6b402a6d6a33a2b059ceb4973c0f6a895cec093c887c7bfe5c8e2449c

    • SSDEEP

      1536:a7ZyqaFAxTWH1++PJHJXA/OsIZfzc3/Q8VCnXxX81M4c6i:enaypQSoPXxX3

    • Renames multiple (3178) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks