General

  • Target

    8c1198678f12bbd796914743ae017e20N.exe

  • Size

    54KB

  • Sample

    240814-lldbvsvela

  • MD5

    8c1198678f12bbd796914743ae017e20

  • SHA1

    fcef4d216594e777e14b743195e17b591bddba74

  • SHA256

    b0efc87067600d27cf344fdb43e3ac6355f79d6aa11543564b0723b47960e0de

  • SHA512

    ba410e7164cf65d6dd8ae76b99193b24c15c2b38439df1f3aa32e432ea0afd232a057289468bb7bafa1069ffabf4269d568cec3b1b2c7e63256be3e20965f3e6

  • SSDEEP

    768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFIO:CTWn1++PJHJXA/OsIZfzc3/Q8IZTY

Malware Config

Targets

    • Target

      8c1198678f12bbd796914743ae017e20N.exe

    • Size

      54KB

    • MD5

      8c1198678f12bbd796914743ae017e20

    • SHA1

      fcef4d216594e777e14b743195e17b591bddba74

    • SHA256

      b0efc87067600d27cf344fdb43e3ac6355f79d6aa11543564b0723b47960e0de

    • SHA512

      ba410e7164cf65d6dd8ae76b99193b24c15c2b38439df1f3aa32e432ea0afd232a057289468bb7bafa1069ffabf4269d568cec3b1b2c7e63256be3e20965f3e6

    • SSDEEP

      768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFIO:CTWn1++PJHJXA/OsIZfzc3/Q8IZTY

    • Renames multiple (3321) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks