General

  • Target

    ea38c6d040c23c42f26b2fd5da47e640N.exe

  • Size

    50KB

  • Sample

    240819-ghnwza1bjr

  • MD5

    ea38c6d040c23c42f26b2fd5da47e640

  • SHA1

    fa8cc231866d98e31ce2d30516b20c02e7882c94

  • SHA256

    f587943f28effcf1316cf1c2e8c08a99fd6b3296e5b8c6e242f2e0e1f048507e

  • SHA512

    627b7d3bd1058897154982eae1d31c7570341010a9f2284d15783b2acaf80a6a82c1d1b2f7a5500c59c8ef75c659e8d5a6e6527e9caf25f4a8484fe42eae4260

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9UiO:V7Zf/FAxTWoJJ7TiiO

Malware Config

Targets

    • Target

      ea38c6d040c23c42f26b2fd5da47e640N.exe

    • Size

      50KB

    • MD5

      ea38c6d040c23c42f26b2fd5da47e640

    • SHA1

      fa8cc231866d98e31ce2d30516b20c02e7882c94

    • SHA256

      f587943f28effcf1316cf1c2e8c08a99fd6b3296e5b8c6e242f2e0e1f048507e

    • SHA512

      627b7d3bd1058897154982eae1d31c7570341010a9f2284d15783b2acaf80a6a82c1d1b2f7a5500c59c8ef75c659e8d5a6e6527e9caf25f4a8484fe42eae4260

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9UiO:V7Zf/FAxTWoJJ7TiiO

    • Renames multiple (3416) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks