General

  • Target

    3c45703d3fcda8f53a2ca605aa33fb20N.exe

  • Size

    36KB

  • Sample

    240803-dbgbrs1bjl

  • MD5

    3c45703d3fcda8f53a2ca605aa33fb20

  • SHA1

    9333aa84a279c231d2d7a03d5993ad54825ecfe0

  • SHA256

    8795b0fabf2d2900e5f2d5336a06fff1c5e441dd83e59f52f388361296deb1ac

  • SHA512

    c73be7a5b95edc4ded85dee80c457031f438276561da7609a4ae0189097d1c3f8ac4221e40f07adce783d3728dc2cccf5e4b2a319934c6d93b4a0682d96835fb

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcwBcCBcw/tio/tiEIRIW:CTW7JJ7TTQoQH

Malware Config

Targets

    • Target

      3c45703d3fcda8f53a2ca605aa33fb20N.exe

    • Size

      36KB

    • MD5

      3c45703d3fcda8f53a2ca605aa33fb20

    • SHA1

      9333aa84a279c231d2d7a03d5993ad54825ecfe0

    • SHA256

      8795b0fabf2d2900e5f2d5336a06fff1c5e441dd83e59f52f388361296deb1ac

    • SHA512

      c73be7a5b95edc4ded85dee80c457031f438276561da7609a4ae0189097d1c3f8ac4221e40f07adce783d3728dc2cccf5e4b2a319934c6d93b4a0682d96835fb

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcwBcCBcw/tio/tiEIRIW:CTW7JJ7TTQoQH

    • Renames multiple (475) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks