General

  • Target

    ae5752b686276d5b10889e2773bc73e0N.exe

  • Size

    35KB

  • Sample

    240805-twfhzavhme

  • MD5

    ae5752b686276d5b10889e2773bc73e0

  • SHA1

    208af8643af52ca5df45fdb24d40eee9a57fc6b9

  • SHA256

    75bb7e361ccc12e0f16007b74df1ad67af81885e9e64a20bceae7554be8b9ec1

  • SHA512

    69fd7472a6b8ae4a7a213a08c609f823d3042aae3279f85d187809ea53d0a46d4b67be211ad9cc5ccaf1b5098635af3e2ccf99a1a3be1fe67924805d72ebb5c3

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcwBcCBcw/tio/tiIF:CTW7JJ7TTQoQg

Malware Config

Targets

    • Target

      ae5752b686276d5b10889e2773bc73e0N.exe

    • Size

      35KB

    • MD5

      ae5752b686276d5b10889e2773bc73e0

    • SHA1

      208af8643af52ca5df45fdb24d40eee9a57fc6b9

    • SHA256

      75bb7e361ccc12e0f16007b74df1ad67af81885e9e64a20bceae7554be8b9ec1

    • SHA512

      69fd7472a6b8ae4a7a213a08c609f823d3042aae3279f85d187809ea53d0a46d4b67be211ad9cc5ccaf1b5098635af3e2ccf99a1a3be1fe67924805d72ebb5c3

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcwBcCBcw/tio/tiIF:CTW7JJ7TTQoQg

    • Renames multiple (3303) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks