General

  • Target

    598f07ec48f068a2d326f51c9bfe0350N.exe

  • Size

    54KB

  • Sample

    240817-jl2ncaxhnr

  • MD5

    598f07ec48f068a2d326f51c9bfe0350

  • SHA1

    d9724f6c74060c1cadefd3c4ba6ea772a974dfcb

  • SHA256

    81e9be863d79da08f58be215f66773030435af744513dc3aa4998ef839661414

  • SHA512

    87650995b9b7f37a27b03370cfd81f7f59fc00bd7bb62a2ee61f43f2997c700ab2464358925901dde21f37462cb85798437e31ca3aa9842a26e919f3fe9fd92d

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATNyQYg/8:V7Zf/FAxTWoJJZENTNyQYt

Malware Config

Targets

    • Target

      598f07ec48f068a2d326f51c9bfe0350N.exe

    • Size

      54KB

    • MD5

      598f07ec48f068a2d326f51c9bfe0350

    • SHA1

      d9724f6c74060c1cadefd3c4ba6ea772a974dfcb

    • SHA256

      81e9be863d79da08f58be215f66773030435af744513dc3aa4998ef839661414

    • SHA512

      87650995b9b7f37a27b03370cfd81f7f59fc00bd7bb62a2ee61f43f2997c700ab2464358925901dde21f37462cb85798437e31ca3aa9842a26e919f3fe9fd92d

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATNyQYg/8:V7Zf/FAxTWoJJZENTNyQYt

    • Renames multiple (3216) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks