General

  • Target

    2e8ccf24ac7115979774950b7c284560N.exe

  • Size

    46KB

  • Sample

    240817-t7zqzswamh

  • MD5

    2e8ccf24ac7115979774950b7c284560

  • SHA1

    c2b713d00631234ee49bff2ca9401435d7ba99b4

  • SHA256

    dab8a64d1e81cd4cb83861038d166e1bef8d3cfad5ab74cc129846a4c8a79a82

  • SHA512

    9ac48057f090c8ba1524f263cade4d6c71b03225cbb6867a91e928125e901b07ee3c68fab942a0f3df334839e202928d892fc74a84500830d1d8d405127c3a61

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI93he:V7Zf/FAxTWoJJ7TRhe

Malware Config

Targets

    • Target

      2e8ccf24ac7115979774950b7c284560N.exe

    • Size

      46KB

    • MD5

      2e8ccf24ac7115979774950b7c284560

    • SHA1

      c2b713d00631234ee49bff2ca9401435d7ba99b4

    • SHA256

      dab8a64d1e81cd4cb83861038d166e1bef8d3cfad5ab74cc129846a4c8a79a82

    • SHA512

      9ac48057f090c8ba1524f263cade4d6c71b03225cbb6867a91e928125e901b07ee3c68fab942a0f3df334839e202928d892fc74a84500830d1d8d405127c3a61

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI93he:V7Zf/FAxTWoJJ7TRhe

    • Renames multiple (3267) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks