General

  • Target

    20a2fecc504cef7edf2ba10b0b8751e0N.exe

  • Size

    49KB

  • Sample

    240728-alhqsszdke

  • MD5

    20a2fecc504cef7edf2ba10b0b8751e0

  • SHA1

    2ad42c1e125cb3cfd2c2368221b7e71b2f96cd04

  • SHA256

    22ce01c92e1a36f7e86c1652e687a222471289c1c9e940484b5cc126013b6b77

  • SHA512

    af648ab876f616e5e6235978ae21b48d029091040ea87298032d0c54877c1412cc38be68f42175ddd23a020307df53cb5905a6f67f37b1372589b4fcc1f098e4

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATBT:V7Zf/FAxTWoJJZENTBT

Malware Config

Targets

    • Target

      20a2fecc504cef7edf2ba10b0b8751e0N.exe

    • Size

      49KB

    • MD5

      20a2fecc504cef7edf2ba10b0b8751e0

    • SHA1

      2ad42c1e125cb3cfd2c2368221b7e71b2f96cd04

    • SHA256

      22ce01c92e1a36f7e86c1652e687a222471289c1c9e940484b5cc126013b6b77

    • SHA512

      af648ab876f616e5e6235978ae21b48d029091040ea87298032d0c54877c1412cc38be68f42175ddd23a020307df53cb5905a6f67f37b1372589b4fcc1f098e4

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATBT:V7Zf/FAxTWoJJZENTBT

    • Renames multiple (2624) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks