General

  • Target

    da9de7df24188d2dbc6d1f330bee3c60N.exe

  • Size

    73KB

  • Sample

    240725-saz5tavdjp

  • MD5

    da9de7df24188d2dbc6d1f330bee3c60

  • SHA1

    b4bd14b85012a21c06231b30f2a56ef685ec0b9a

  • SHA256

    09c3dae906f2333992b0cb5ab7006fab75bc3e639d1383510468f45ed513caf5

  • SHA512

    004b68ae44cb5305c85f198aab116da6fdd074cd9ac0421c7f8b6f850d0c25ceaaa4fd3881836266f85c5b5319fb57f6559bb63a1a2025edbacca777517cc798

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8IZbYt:fnyiQSo7Zm

Malware Config

Targets

    • Target

      da9de7df24188d2dbc6d1f330bee3c60N.exe

    • Size

      73KB

    • MD5

      da9de7df24188d2dbc6d1f330bee3c60

    • SHA1

      b4bd14b85012a21c06231b30f2a56ef685ec0b9a

    • SHA256

      09c3dae906f2333992b0cb5ab7006fab75bc3e639d1383510468f45ed513caf5

    • SHA512

      004b68ae44cb5305c85f198aab116da6fdd074cd9ac0421c7f8b6f850d0c25ceaaa4fd3881836266f85c5b5319fb57f6559bb63a1a2025edbacca777517cc798

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8IZbYt:fnyiQSo7Zm

    • Renames multiple (2586) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks