General

  • Target

    047ffe7e83b3a17902f17185e5bb4430N.exe

  • Size

    96KB

  • Sample

    240801-z94evawgmq

  • MD5

    047ffe7e83b3a17902f17185e5bb4430

  • SHA1

    8f8abd1491b3ee4bb1689870ec6231ac20e122e4

  • SHA256

    8b611ea462b082e71ac6fd3f2b64530b5cb1b8ae4ffb45b938bdf1d832d05b4c

  • SHA512

    c856fb7e4dfd42705374f7eed94810b939aef8bb5bc67d4beed441d660e09926a436006420211389961940e2ab487f3e5b46643330c12ac725b90a893a431987

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zx0Cq/8S/8dE0WnL/Tn5+PP:fnyiQSop8i8dJQbTn5+3

Malware Config

Targets

    • Target

      047ffe7e83b3a17902f17185e5bb4430N.exe

    • Size

      96KB

    • MD5

      047ffe7e83b3a17902f17185e5bb4430

    • SHA1

      8f8abd1491b3ee4bb1689870ec6231ac20e122e4

    • SHA256

      8b611ea462b082e71ac6fd3f2b64530b5cb1b8ae4ffb45b938bdf1d832d05b4c

    • SHA512

      c856fb7e4dfd42705374f7eed94810b939aef8bb5bc67d4beed441d660e09926a436006420211389961940e2ab487f3e5b46643330c12ac725b90a893a431987

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zx0Cq/8S/8dE0WnL/Tn5+PP:fnyiQSop8i8dJQbTn5+3

    • Renames multiple (2837) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks