General

  • Target

    3f4cdadb5794e3b211fc2f5c678b5a40N.exe

  • Size

    127KB

  • Sample

    240803-dmrxms1elp

  • MD5

    3f4cdadb5794e3b211fc2f5c678b5a40

  • SHA1

    59c7d0eaac98a416185baeb306df8541c3a226a2

  • SHA256

    3525a016752e7e923e2727d351a41cac3d050b7ac86fb5da42a3dd5331c2aa0d

  • SHA512

    d8543f185ee01a457b4a4aaac2bd5e495707de2133371594529ce64ed1c0207e49d6d848637a30c2b6dfcea288d55e3f28a6d16c10f35dc755d489d5951e8b54

  • SSDEEP

    1536:V7Zf/FAxTWxOmO/fxRfxykK3ZUkK3ZKYF6HTW8OmO/fxRfxykK3ZUkK3ZKYF60:fny+Tuf7fs6eTuf7fs6x

Malware Config

Targets

    • Target

      3f4cdadb5794e3b211fc2f5c678b5a40N.exe

    • Size

      127KB

    • MD5

      3f4cdadb5794e3b211fc2f5c678b5a40

    • SHA1

      59c7d0eaac98a416185baeb306df8541c3a226a2

    • SHA256

      3525a016752e7e923e2727d351a41cac3d050b7ac86fb5da42a3dd5331c2aa0d

    • SHA512

      d8543f185ee01a457b4a4aaac2bd5e495707de2133371594529ce64ed1c0207e49d6d848637a30c2b6dfcea288d55e3f28a6d16c10f35dc755d489d5951e8b54

    • SSDEEP

      1536:V7Zf/FAxTWxOmO/fxRfxykK3ZUkK3ZKYF6HTW8OmO/fxRfxykK3ZUkK3ZKYF60:fny+Tuf7fs6eTuf7fs6x

    • Renames multiple (2846) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks