General

  • Target

    5128e3f78540662614235993e2c3a320N.exe

  • Size

    24KB

  • Sample

    240726-za7yzswdrb

  • MD5

    5128e3f78540662614235993e2c3a320

  • SHA1

    1bf85c34d046d4ab32ed6a3daa144d4216574c46

  • SHA256

    5f3619290f74b691079963ad87e3f81e2b5d1b28b4d7853bf75af1464ab30724

  • SHA512

    3f6c63d41b2a898871b3f0b4b936330452f9a5c874f4a0540eb0cfdec12263bae61f928d926e91cb244940b840c79c1798aa03fcf0a1c9b3615506be9b92be51

  • SSDEEP

    768:kBT37CPKKdJJBZBZaOAOIB3jM2jM7lKsr:CTW7JJB7LD2I2Iosr

Malware Config

Targets

    • Target

      5128e3f78540662614235993e2c3a320N.exe

    • Size

      24KB

    • MD5

      5128e3f78540662614235993e2c3a320

    • SHA1

      1bf85c34d046d4ab32ed6a3daa144d4216574c46

    • SHA256

      5f3619290f74b691079963ad87e3f81e2b5d1b28b4d7853bf75af1464ab30724

    • SHA512

      3f6c63d41b2a898871b3f0b4b936330452f9a5c874f4a0540eb0cfdec12263bae61f928d926e91cb244940b840c79c1798aa03fcf0a1c9b3615506be9b92be51

    • SSDEEP

      768:kBT37CPKKdJJBZBZaOAOIB3jM2jM7lKsr:CTW7JJB7LD2I2Iosr

    • Renames multiple (2845) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks