General

  • Target

    79d5b7d6247f9222e4859726c01c2c00N.exe

  • Size

    71KB

  • Sample

    240727-bs9zasxgqm

  • MD5

    79d5b7d6247f9222e4859726c01c2c00

  • SHA1

    77c0490802b159f91704bcf50c254dea4312f1db

  • SHA256

    b272b679b41b34f04bd480d375b2faa972abfec9e3a1953115982e95e947646c

  • SHA512

    5c75dd5ee4d2ae85342acd69ac2fec0c5e355471ef9a35693f60c59698d2d6d2bb46622daf062b7a49a32eb19e51656eb8cbd1854bf3c54a783830d05563adad

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8asUsK8/8q:fnyiQSohsUsxkq

Malware Config

Targets

    • Target

      79d5b7d6247f9222e4859726c01c2c00N.exe

    • Size

      71KB

    • MD5

      79d5b7d6247f9222e4859726c01c2c00

    • SHA1

      77c0490802b159f91704bcf50c254dea4312f1db

    • SHA256

      b272b679b41b34f04bd480d375b2faa972abfec9e3a1953115982e95e947646c

    • SHA512

      5c75dd5ee4d2ae85342acd69ac2fec0c5e355471ef9a35693f60c59698d2d6d2bb46622daf062b7a49a32eb19e51656eb8cbd1854bf3c54a783830d05563adad

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8asUsK8/8q:fnyiQSohsUsxkq

    • Renames multiple (634) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks