General

  • Target

    a4b9617e383d9b2b2bd0fd1da22cb230N.exe

  • Size

    53KB

  • Sample

    240727-hrs3qashqj

  • MD5

    a4b9617e383d9b2b2bd0fd1da22cb230

  • SHA1

    4ebd4b15bbb364e14eef6d65964684b95269f9f4

  • SHA256

    84b5234c1a2461c58892d5d52c377913cdf62afcf31f2c1be8c1459faab1308b

  • SHA512

    85d98724bd34b8a3d8d0b89b17a4c9da02760bdb744360bdc3f9212082b1e8bb10741362c1b9ffcaeb5bab719326d97a7066de76121102549bf573a816aff22b

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATNyHF/MF/HggD5j:V7Zf/FAxTWoJJZENTNyl2aPK

Malware Config

Targets

    • Target

      a4b9617e383d9b2b2bd0fd1da22cb230N.exe

    • Size

      53KB

    • MD5

      a4b9617e383d9b2b2bd0fd1da22cb230

    • SHA1

      4ebd4b15bbb364e14eef6d65964684b95269f9f4

    • SHA256

      84b5234c1a2461c58892d5d52c377913cdf62afcf31f2c1be8c1459faab1308b

    • SHA512

      85d98724bd34b8a3d8d0b89b17a4c9da02760bdb744360bdc3f9212082b1e8bb10741362c1b9ffcaeb5bab719326d97a7066de76121102549bf573a816aff22b

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATNyHF/MF/HggD5j:V7Zf/FAxTWoJJZENTNyl2aPK

    • Renames multiple (630) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks