General

  • Target

    cbda893fb964a3b2ae9809ca3f399d40N.exe

  • Size

    54KB

  • Sample

    240819-eve4gstdnf

  • MD5

    cbda893fb964a3b2ae9809ca3f399d40

  • SHA1

    9fc62dae89066849325228ed0e29e50c04c19bdf

  • SHA256

    f24345af91b6a64f43e66f0228f59fe7b6d21765d6914eb4281aa62e858c9ae2

  • SHA512

    b1a5d18451748d9c52aae467466e2c5bd4857d3a833c2943201fa408bada7419a3294204688e7ee3a6bdf1354de216a727a2bdced0013d957dfea2bf8dac42d4

  • SSDEEP

    768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFIs:CTWn1++PJHJXA/OsIZfzc3/Q8IZTO

Malware Config

Targets

    • Target

      cbda893fb964a3b2ae9809ca3f399d40N.exe

    • Size

      54KB

    • MD5

      cbda893fb964a3b2ae9809ca3f399d40

    • SHA1

      9fc62dae89066849325228ed0e29e50c04c19bdf

    • SHA256

      f24345af91b6a64f43e66f0228f59fe7b6d21765d6914eb4281aa62e858c9ae2

    • SHA512

      b1a5d18451748d9c52aae467466e2c5bd4857d3a833c2943201fa408bada7419a3294204688e7ee3a6bdf1354de216a727a2bdced0013d957dfea2bf8dac42d4

    • SSDEEP

      768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFIs:CTWn1++PJHJXA/OsIZfzc3/Q8IZTO

    • Renames multiple (3240) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks