General

  • Target

    c99a937274978dc0ba34cb60e3106cb0N.exe

  • Size

    29KB

  • Sample

    240806-s89f5sxake

  • MD5

    c99a937274978dc0ba34cb60e3106cb0

  • SHA1

    6abfca092a5f5af11d04855ecfe7d157ca469e86

  • SHA256

    aa9f0d1ca8704c51ef0fbae8f4dd8ac87a78f6c96fa46f5c42baf09529ebb9e8

  • SHA512

    7f9a2338f42ceae1cdeceffa8c306ea55df19d51443803cd4216dafcc57f4878c0440d65ff1670d038ef8c7c6e381476fc86161be742e69bfc76db9bef24b902

  • SSDEEP

    768:kBT37CPKK1EXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rcu90TKe+0TKeR/z:CTWr/z

Malware Config

Targets

    • Target

      c99a937274978dc0ba34cb60e3106cb0N.exe

    • Size

      29KB

    • MD5

      c99a937274978dc0ba34cb60e3106cb0

    • SHA1

      6abfca092a5f5af11d04855ecfe7d157ca469e86

    • SHA256

      aa9f0d1ca8704c51ef0fbae8f4dd8ac87a78f6c96fa46f5c42baf09529ebb9e8

    • SHA512

      7f9a2338f42ceae1cdeceffa8c306ea55df19d51443803cd4216dafcc57f4878c0440d65ff1670d038ef8c7c6e381476fc86161be742e69bfc76db9bef24b902

    • SSDEEP

      768:kBT37CPKK1EXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rcu90TKe+0TKeR/z:CTWr/z

    • Renames multiple (3452) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks