General

  • Target

    21b334221a69bac42df2c8f96363b770N.exe

  • Size

    61KB

  • Sample

    240728-ap1e1szenh

  • MD5

    21b334221a69bac42df2c8f96363b770

  • SHA1

    25abd24da88ab31786fa24966051a3123c43c736

  • SHA256

    a7c2150c0541cdb987e8395bef2a93ee0bd19f0e08e0c20aba80261d7f09c978

  • SHA512

    c699f1e9d248a89ce0723654a5b04b71553ef3649bc6deb4d809ae1c83905eebbb3b05b3de68231ca99dada06de534da31858e6812fe49952eedda891118bb37

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATNykBT37CPKKdJ9:V7Zf/FAxTWoJJZENTNyCTW7JJZENTNyf

Malware Config

Targets

    • Target

      21b334221a69bac42df2c8f96363b770N.exe

    • Size

      61KB

    • MD5

      21b334221a69bac42df2c8f96363b770

    • SHA1

      25abd24da88ab31786fa24966051a3123c43c736

    • SHA256

      a7c2150c0541cdb987e8395bef2a93ee0bd19f0e08e0c20aba80261d7f09c978

    • SHA512

      c699f1e9d248a89ce0723654a5b04b71553ef3649bc6deb4d809ae1c83905eebbb3b05b3de68231ca99dada06de534da31858e6812fe49952eedda891118bb37

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATNykBT37CPKKdJ9:V7Zf/FAxTWoJJZENTNyCTW7JJZENTNyf

    • Renames multiple (2562) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks