General

  • Target

    8d25d4025c2615dab4411d607d843e60N.exe

  • Size

    26KB

  • Sample

    240727-ehsttayfjd

  • MD5

    8d25d4025c2615dab4411d607d843e60

  • SHA1

    12cc6a5470c47359ff0089df4cfc5747bc4503ad

  • SHA256

    33577fec5033b6a6264e54d0bb4efaede2ae92acd816ef83e98a336329602639

  • SHA512

    665aaeb969ee18b8aa42e437fbfa2aa6a8b6f0ed96e5087015c045e9e684b02c0cf66b310778224ac4ec121420916591bd2385d5cc9c269605939e433d8513c9

  • SSDEEP

    768:kBT37CPKKdJJBZBZaOAOIB3jM2jM7lZ34Ubb34Ub6:CTW7JJB7LD2I2Ifosbos6

Malware Config

Targets

    • Target

      8d25d4025c2615dab4411d607d843e60N.exe

    • Size

      26KB

    • MD5

      8d25d4025c2615dab4411d607d843e60

    • SHA1

      12cc6a5470c47359ff0089df4cfc5747bc4503ad

    • SHA256

      33577fec5033b6a6264e54d0bb4efaede2ae92acd816ef83e98a336329602639

    • SHA512

      665aaeb969ee18b8aa42e437fbfa2aa6a8b6f0ed96e5087015c045e9e684b02c0cf66b310778224ac4ec121420916591bd2385d5cc9c269605939e433d8513c9

    • SSDEEP

      768:kBT37CPKKdJJBZBZaOAOIB3jM2jM7lZ34Ubb34Ub6:CTW7JJB7LD2I2Ifosbos6

    • Renames multiple (234) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks