General

  • Target

    57d5e6341d318f8e0a173b0de4d08430N.exe

  • Size

    744KB

  • Sample

    240819-kjbjtatgmb

  • MD5

    57d5e6341d318f8e0a173b0de4d08430

  • SHA1

    5127d7fa6511eac8a429ec811090507716be4058

  • SHA256

    675bc17b6cb0baca44784dec7f4462358848e8581306dae1f8fe5e9dda24f409

  • SHA512

    48cd1bed68838a37f3f35a7e6e35640e778f126152f9c307906cfd0c9daaa2164bfcd9dde7de450b5a47a3b401e2c0c6b27012ed9ea040e758b78ce708a86e71

  • SSDEEP

    12288:9oQXJ/8tJV+VUxmSMkqA3C0pF9yapDI0/p:eQZ/SVEcmSMkqA3C0pF9ys8U

Malware Config

Targets

    • Target

      57d5e6341d318f8e0a173b0de4d08430N.exe

    • Size

      744KB

    • MD5

      57d5e6341d318f8e0a173b0de4d08430

    • SHA1

      5127d7fa6511eac8a429ec811090507716be4058

    • SHA256

      675bc17b6cb0baca44784dec7f4462358848e8581306dae1f8fe5e9dda24f409

    • SHA512

      48cd1bed68838a37f3f35a7e6e35640e778f126152f9c307906cfd0c9daaa2164bfcd9dde7de450b5a47a3b401e2c0c6b27012ed9ea040e758b78ce708a86e71

    • SSDEEP

      12288:9oQXJ/8tJV+VUxmSMkqA3C0pF9yapDI0/p:eQZ/SVEcmSMkqA3C0pF9ys8U

    • Renames multiple (948) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks