General

  • Target

    efffa25246726c23beefb70e822f02a0N.exe

  • Size

    46KB

  • Sample

    240820-ebbxqasbma

  • MD5

    efffa25246726c23beefb70e822f02a0

  • SHA1

    6adcb07e4a06c0e19e0c40c085e67c78230378b8

  • SHA256

    77a0c168f936727216957fa0c5b851f4e01d6ba33e59efb4e7571159296704c7

  • SHA512

    72b3f001906080a75725f574a9504f7f2dab023506125dd43785643cc8b80a0d97ebb124082c0dd90b8f0e01e5248f326d0a8fc57daefea7108b12464c45d889

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9h:V7Zf/FAxTWoJJ7TP

Malware Config

Targets

    • Target

      efffa25246726c23beefb70e822f02a0N.exe

    • Size

      46KB

    • MD5

      efffa25246726c23beefb70e822f02a0

    • SHA1

      6adcb07e4a06c0e19e0c40c085e67c78230378b8

    • SHA256

      77a0c168f936727216957fa0c5b851f4e01d6ba33e59efb4e7571159296704c7

    • SHA512

      72b3f001906080a75725f574a9504f7f2dab023506125dd43785643cc8b80a0d97ebb124082c0dd90b8f0e01e5248f326d0a8fc57daefea7108b12464c45d889

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9h:V7Zf/FAxTWoJJ7TP

    • Renames multiple (3308) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks