General

  • Target

    9b309ad1def06f58975f53b045090450N.exe

  • Size

    25KB

  • Sample

    240818-ccfwysygqb

  • MD5

    9b309ad1def06f58975f53b045090450

  • SHA1

    5660d12cf0f7f1e1f3cc90b4e92dadfc3a5c603e

  • SHA256

    e960f0a937796b51af0a6332a68f2f033317a0a0a34a7ab8744a9026dfbbe776

  • SHA512

    afc77f1bb6d247400c936d1df74e16971dcbf251cf831cfd2cb874387a86c51c8d2a84f0cdf97432b00a687fc674b9da0ff58d18481ebb2bda1a8fffc75150d6

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9Q9vA9vB:CTW7JJ7Ti9vA9vB

Malware Config

Targets

    • Target

      9b309ad1def06f58975f53b045090450N.exe

    • Size

      25KB

    • MD5

      9b309ad1def06f58975f53b045090450

    • SHA1

      5660d12cf0f7f1e1f3cc90b4e92dadfc3a5c603e

    • SHA256

      e960f0a937796b51af0a6332a68f2f033317a0a0a34a7ab8744a9026dfbbe776

    • SHA512

      afc77f1bb6d247400c936d1df74e16971dcbf251cf831cfd2cb874387a86c51c8d2a84f0cdf97432b00a687fc674b9da0ff58d18481ebb2bda1a8fffc75150d6

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9Q9vA9vB:CTW7JJ7Ti9vA9vB

    • Renames multiple (3282) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks