General

  • Target

    cc7c83203e1bb71a73bc16ecb54a7910N.exe

  • Size

    21KB

  • Sample

    240802-zpcrdszcpp

  • MD5

    cc7c83203e1bb71a73bc16ecb54a7910

  • SHA1

    e58e70de15061a8362174172eec7b6ae359a3707

  • SHA256

    411fc4854a5ebd3927c9ed5d6a30c855a3c41aa9b4fd408345034428eefb475f

  • SHA512

    899bad1a62aeabb7f8a68560d1ab0297877a8355fa17fa38fd40cae6cec88fd512cfc4814e8fc85dd5c99e56c4f8a237ff02bd86cd1403564047441f60cdc369

  • SSDEEP

    384:QOlIBXDaU7CPKK0TIhfJJcbQbf1Oti1JGBQOOiQJhAT17en:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJ5

Malware Config

Targets

    • Target

      cc7c83203e1bb71a73bc16ecb54a7910N.exe

    • Size

      21KB

    • MD5

      cc7c83203e1bb71a73bc16ecb54a7910

    • SHA1

      e58e70de15061a8362174172eec7b6ae359a3707

    • SHA256

      411fc4854a5ebd3927c9ed5d6a30c855a3c41aa9b4fd408345034428eefb475f

    • SHA512

      899bad1a62aeabb7f8a68560d1ab0297877a8355fa17fa38fd40cae6cec88fd512cfc4814e8fc85dd5c99e56c4f8a237ff02bd86cd1403564047441f60cdc369

    • SSDEEP

      384:QOlIBXDaU7CPKK0TIhfJJcbQbf1Oti1JGBQOOiQJhAT17en:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJ5

    • Renames multiple (3400) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks