General

  • Target

    1f770fd7ee799ba27b0307b52be74cf0N.exe

  • Size

    75KB

  • Sample

    240728-aga56azblb

  • MD5

    1f770fd7ee799ba27b0307b52be74cf0

  • SHA1

    9df1ea68d567f2e39451c29c4432c1e189db5774

  • SHA256

    ca358acfac0eb79cb4c48469a0be6216a8b68b90f2545d691dce0de0d718e5a1

  • SHA512

    683736df083c7c23f98b2675439c619b15415fb00d2679216b6064c4e24a1a39f82b0746c7dad3a11b5e353de2c51ddd6d2d225eaabd9f63bdc3066e7e361284

  • SSDEEP

    1536:V7Zf/FAxTWoJJB7LD2I2INTW7JJB7LD2I2IL:fny1tD332tD33L

Malware Config

Targets

    • Target

      1f770fd7ee799ba27b0307b52be74cf0N.exe

    • Size

      75KB

    • MD5

      1f770fd7ee799ba27b0307b52be74cf0

    • SHA1

      9df1ea68d567f2e39451c29c4432c1e189db5774

    • SHA256

      ca358acfac0eb79cb4c48469a0be6216a8b68b90f2545d691dce0de0d718e5a1

    • SHA512

      683736df083c7c23f98b2675439c619b15415fb00d2679216b6064c4e24a1a39f82b0746c7dad3a11b5e353de2c51ddd6d2d225eaabd9f63bdc3066e7e361284

    • SSDEEP

      1536:V7Zf/FAxTWoJJB7LD2I2INTW7JJB7LD2I2IL:fny1tD332tD33L

    • Renames multiple (1652) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks