General

  • Target

    db9575557777d38690a769a0f6c6a870N.exe

  • Size

    54KB

  • Sample

    240725-sjn4xawbmm

  • MD5

    db9575557777d38690a769a0f6c6a870

  • SHA1

    4953688b383023e72b43d656371e2966e49275c3

  • SHA256

    48e80c1a45ff4bdeb0a175a74cc4383b7a4e91075f3013a6ff441b1d081faa4c

  • SHA512

    a2dddab6b78a568e5a53e7ba2a369fff6dc1b9215bbb42b2f8f11bcc37a60ead5cee3027ee83c6383e7156e143ca0e114d3f727d92e3d1aef3446df1e83291a2

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATNyN6:V7Zf/FAxTWoJJZENTNyN6

Malware Config

Targets

    • Target

      db9575557777d38690a769a0f6c6a870N.exe

    • Size

      54KB

    • MD5

      db9575557777d38690a769a0f6c6a870

    • SHA1

      4953688b383023e72b43d656371e2966e49275c3

    • SHA256

      48e80c1a45ff4bdeb0a175a74cc4383b7a4e91075f3013a6ff441b1d081faa4c

    • SHA512

      a2dddab6b78a568e5a53e7ba2a369fff6dc1b9215bbb42b2f8f11bcc37a60ead5cee3027ee83c6383e7156e143ca0e114d3f727d92e3d1aef3446df1e83291a2

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATNyN6:V7Zf/FAxTWoJJZENTNyN6

    • Renames multiple (2852) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks