General

  • Target

    dd282e6006c7d65d7b5251acbdc52b60N.exe

  • Size

    105KB

  • Sample

    240819-q97yla1eqk

  • MD5

    dd282e6006c7d65d7b5251acbdc52b60

  • SHA1

    c726f991dc5b000aefe2607339aed037e9489166

  • SHA256

    5b68347651ee5b6d42e66c96e6dbf90095d47601e2711eaf2133cf1d6ecdfab7

  • SHA512

    b1931fa703e3ac54ca6454d89f4c23deb4a003f6ba4ad5b80057eb066f1011cf41a3fbd9ca73bb1b3617e6ef3c4c43b4fbd633b72c0d26b24e45cbc659c98ee1

  • SSDEEP

    1536:V7Zf/FAxTWoJJZENTNyl2Sm0mdngIxwwiZdH7iZiqrJdEyumTQR:fny1tE42rnhudHaJdPuOQR

Malware Config

Targets

    • Target

      dd282e6006c7d65d7b5251acbdc52b60N.exe

    • Size

      105KB

    • MD5

      dd282e6006c7d65d7b5251acbdc52b60

    • SHA1

      c726f991dc5b000aefe2607339aed037e9489166

    • SHA256

      5b68347651ee5b6d42e66c96e6dbf90095d47601e2711eaf2133cf1d6ecdfab7

    • SHA512

      b1931fa703e3ac54ca6454d89f4c23deb4a003f6ba4ad5b80057eb066f1011cf41a3fbd9ca73bb1b3617e6ef3c4c43b4fbd633b72c0d26b24e45cbc659c98ee1

    • SSDEEP

      1536:V7Zf/FAxTWoJJZENTNyl2Sm0mdngIxwwiZdH7iZiqrJdEyumTQR:fny1tE42rnhudHaJdPuOQR

    • Renames multiple (2966) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks