General

  • Target

    7c14860a2d97730336c390e1b6d20820N.exe

  • Size

    142KB

  • Sample

    240805-l7r25stall

  • MD5

    7c14860a2d97730336c390e1b6d20820

  • SHA1

    e7bf954fe61fbc9c7184d94f633ef56aeddc817e

  • SHA256

    9f1dfc70328484ae7c5cd7dc05378480545e0d0758dd6ce8e1c8ddfd65809815

  • SHA512

    425a82215b54903ce9a003bd2f3234604ecd1a616f6449c11a9acfc955a1e4429de6db757a80e0446ce58af5b0cfc2bbfe6e07976548b1893a04f4537258fe37

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8NCuXYRY5I2ISTWn1++PJHJXA/OsIZfz0:fnyiQSoDuXuv36QSoDuXuv3cimiC

Malware Config

Targets

    • Target

      7c14860a2d97730336c390e1b6d20820N.exe

    • Size

      142KB

    • MD5

      7c14860a2d97730336c390e1b6d20820

    • SHA1

      e7bf954fe61fbc9c7184d94f633ef56aeddc817e

    • SHA256

      9f1dfc70328484ae7c5cd7dc05378480545e0d0758dd6ce8e1c8ddfd65809815

    • SHA512

      425a82215b54903ce9a003bd2f3234604ecd1a616f6449c11a9acfc955a1e4429de6db757a80e0446ce58af5b0cfc2bbfe6e07976548b1893a04f4537258fe37

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8NCuXYRY5I2ISTWn1++PJHJXA/OsIZfz0:fnyiQSoDuXuv36QSoDuXuv3cimiC

    • Renames multiple (2821) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks