General

  • Target

    0f69c50fb2e916987660201d1c8ceac0N.exe

  • Size

    24KB

  • Sample

    240727-2me5vawalh

  • MD5

    0f69c50fb2e916987660201d1c8ceac0

  • SHA1

    13e2c6b29839ea4b292a899890392c8431c3b90c

  • SHA256

    6405eb70da4a1051c792b72a1bf799d5ce9c0c5fb19844aa97194ad0a8ac3740

  • SHA512

    b032dd10c071fca56646834e79e072be305a6c185789f7788afd0227912768bfce7d7f632084c1cb5725c6ccf7bdfbcdbabbfdfada0f7172c6687af818d6dc23

  • SSDEEP

    768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATBnpf:CTW7JJZENTBnpf

Malware Config

Targets

    • Target

      0f69c50fb2e916987660201d1c8ceac0N.exe

    • Size

      24KB

    • MD5

      0f69c50fb2e916987660201d1c8ceac0

    • SHA1

      13e2c6b29839ea4b292a899890392c8431c3b90c

    • SHA256

      6405eb70da4a1051c792b72a1bf799d5ce9c0c5fb19844aa97194ad0a8ac3740

    • SHA512

      b032dd10c071fca56646834e79e072be305a6c185789f7788afd0227912768bfce7d7f632084c1cb5725c6ccf7bdfbcdbabbfdfada0f7172c6687af818d6dc23

    • SSDEEP

      768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATBnpf:CTW7JJZENTBnpf

    • Renames multiple (2063) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks