General

  • Target

    132110b1fb0f321ff7bf7af41e40d160N.exe

  • Size

    924KB

  • Sample

    240727-219xdatbnr

  • MD5

    132110b1fb0f321ff7bf7af41e40d160

  • SHA1

    96d9b3468eac437cd0d3b077152ee4800556b688

  • SHA256

    baaa7bd6789404e4916e2759b94ab1a345beadf6ac5a36b0d585b9f5edf5aed0

  • SHA512

    6ddaba233228a0802cf50dff99653f696c60ef323c2006b0184daf91a893734cc11d3a15aed23103831eeae7f5f148d89278abdc565a8e1c04f3173939eef6ac

  • SSDEEP

    24576:p5MTl31GZzzye1kWkhCkhVvlQuLM4paA24QQ0gaiirmMzQlVWTnk7ZqDy:rdzV/Vg7

Malware Config

Targets

    • Target

      132110b1fb0f321ff7bf7af41e40d160N.exe

    • Size

      924KB

    • MD5

      132110b1fb0f321ff7bf7af41e40d160

    • SHA1

      96d9b3468eac437cd0d3b077152ee4800556b688

    • SHA256

      baaa7bd6789404e4916e2759b94ab1a345beadf6ac5a36b0d585b9f5edf5aed0

    • SHA512

      6ddaba233228a0802cf50dff99653f696c60ef323c2006b0184daf91a893734cc11d3a15aed23103831eeae7f5f148d89278abdc565a8e1c04f3173939eef6ac

    • SSDEEP

      24576:p5MTl31GZzzye1kWkhCkhVvlQuLM4paA24QQ0gaiirmMzQlVWTnk7ZqDy:rdzV/Vg7

    • Renames multiple (289) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks