General

  • Target

    6cf3d452cd5abd208782ce6b80b14560N.exe

  • Size

    34KB

  • Sample

    240813-wr4fcatbnj

  • MD5

    6cf3d452cd5abd208782ce6b80b14560

  • SHA1

    1799b54afbd576f68c675473d96f82dbdb9ba75f

  • SHA256

    b84792752954c048b72db290b4de7611ade7533eb37d842ee721f259c85ec43b

  • SHA512

    29bcbb03e49a3c4edf37943132de2bb72bc4dbedc107f3a6c8bba6f9acc12cf07ff71b9b0d1627ddff36c32ccf7e0d0b2d4d1f1d8f60f296609985c5e21b7eaf

  • SSDEEP

    768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATNyHF/MF/6m0m+s2BGUG6mkmP:CTW7JJZENTNyl2Sm0mK5LM

Malware Config

Targets

    • Target

      6cf3d452cd5abd208782ce6b80b14560N.exe

    • Size

      34KB

    • MD5

      6cf3d452cd5abd208782ce6b80b14560

    • SHA1

      1799b54afbd576f68c675473d96f82dbdb9ba75f

    • SHA256

      b84792752954c048b72db290b4de7611ade7533eb37d842ee721f259c85ec43b

    • SHA512

      29bcbb03e49a3c4edf37943132de2bb72bc4dbedc107f3a6c8bba6f9acc12cf07ff71b9b0d1627ddff36c32ccf7e0d0b2d4d1f1d8f60f296609985c5e21b7eaf

    • SSDEEP

      768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATNyHF/MF/6m0m+s2BGUG6mkmP:CTW7JJZENTNyl2Sm0mK5LM

    • Renames multiple (3281) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks