General

  • Target

    ee323817db18eebc776883f2532dcbd0N.exe

  • Size

    70KB

  • Sample

    240817-mj9sqa1bre

  • MD5

    ee323817db18eebc776883f2532dcbd0

  • SHA1

    dd6285510ccf9be2e3c37f10ad09e1e1a6ad349a

  • SHA256

    14adb098236e0fb6fda030a451937296f8a64997021dcb68eb03ee6f1496e1ee

  • SHA512

    3e95ee4e53c87f0d2e070c4de3888a5dcd17afbf349b3599a4d40a26e857d11138a2249a5b3d384db927136efb30640b35468011d7f0a2f20f16c77cb62b0f3b

  • SSDEEP

    1536:a7ZyqaFAxTWH1++PJHJXA/OsIZfzc3/Q8Q8/8fCm:enaypQSoskx

Malware Config

Targets

    • Target

      ee323817db18eebc776883f2532dcbd0N.exe

    • Size

      70KB

    • MD5

      ee323817db18eebc776883f2532dcbd0

    • SHA1

      dd6285510ccf9be2e3c37f10ad09e1e1a6ad349a

    • SHA256

      14adb098236e0fb6fda030a451937296f8a64997021dcb68eb03ee6f1496e1ee

    • SHA512

      3e95ee4e53c87f0d2e070c4de3888a5dcd17afbf349b3599a4d40a26e857d11138a2249a5b3d384db927136efb30640b35468011d7f0a2f20f16c77cb62b0f3b

    • SSDEEP

      1536:a7ZyqaFAxTWH1++PJHJXA/OsIZfzc3/Q8Q8/8fCm:enaypQSoskx

    • Renames multiple (3248) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks