General

  • Target

    ae67165b2c2bf195d61d45fe2be0e2e0N.exe

  • Size

    48KB

  • Sample

    240805-twnvcavhne

  • MD5

    ae67165b2c2bf195d61d45fe2be0e2e0

  • SHA1

    9a4e16386e99da9153b2918b60948b23774aa0c4

  • SHA256

    b4f2f1bbe44f61848e784a8c8e0c7e2b69bc763fcdddafb9071f5b3f71a9c3bf

  • SHA512

    4f3d15a62f2b4c89069316d3fbed3b62cc24ae233b48217930e839f708646e1e23bedccc1e2b20d66ce5424c63ba3db0ba774c82f7dece6ddabacd2acec93c5a

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJXGiXZqVG:V7Zf/FAxTWoJJXUVG

Malware Config

Targets

    • Target

      ae67165b2c2bf195d61d45fe2be0e2e0N.exe

    • Size

      48KB

    • MD5

      ae67165b2c2bf195d61d45fe2be0e2e0

    • SHA1

      9a4e16386e99da9153b2918b60948b23774aa0c4

    • SHA256

      b4f2f1bbe44f61848e784a8c8e0c7e2b69bc763fcdddafb9071f5b3f71a9c3bf

    • SHA512

      4f3d15a62f2b4c89069316d3fbed3b62cc24ae233b48217930e839f708646e1e23bedccc1e2b20d66ce5424c63ba3db0ba774c82f7dece6ddabacd2acec93c5a

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJXGiXZqVG:V7Zf/FAxTWoJJXUVG

    • Renames multiple (356) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks