General

  • Target

    471243e842a18d0a5472271e3d7b3870N.exe

  • Size

    73KB

  • Sample

    240726-bpk6rszfqh

  • MD5

    471243e842a18d0a5472271e3d7b3870

  • SHA1

    f2cd7f67e717816f458f482f8385c904522c6d6c

  • SHA256

    13b284cf708a8a22c2ef5c83f1a36c0813ebf5acb5092eca26f7ee964c73afd4

  • SHA512

    cf8c75d68451192595627a77d5e5576abf62da4fbbb44ba20f6ccea9e3258af2b8e2cccf7824c47f09fbd1905808302a79b5be3e22c8720e906c512b8bc9667e

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxSJ4e3sJ4e36:fnyiQSoZ

Malware Config

Targets

    • Target

      471243e842a18d0a5472271e3d7b3870N.exe

    • Size

      73KB

    • MD5

      471243e842a18d0a5472271e3d7b3870

    • SHA1

      f2cd7f67e717816f458f482f8385c904522c6d6c

    • SHA256

      13b284cf708a8a22c2ef5c83f1a36c0813ebf5acb5092eca26f7ee964c73afd4

    • SHA512

      cf8c75d68451192595627a77d5e5576abf62da4fbbb44ba20f6ccea9e3258af2b8e2cccf7824c47f09fbd1905808302a79b5be3e22c8720e906c512b8bc9667e

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxSJ4e3sJ4e36:fnyiQSoZ

    • Renames multiple (244) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks