General

  • Target

    beae0cbb1b7753ca349aca996adff620N.exe

  • Size

    500KB

  • Sample

    240820-raryrsvhje

  • MD5

    beae0cbb1b7753ca349aca996adff620

  • SHA1

    81c38e8cb79473a12d2ab882369f099c77ba4f84

  • SHA256

    677498cfcf2c19195fd4087e90e7127410497b2efd6cd405c7f63e3674a5047d

  • SHA512

    07bc9e3bf6899fb550d0bdf0fa2a6c0e6a49789bb038e565ae9b351c62b5b385034527214c03c7d37ed536c52b145b88451fecb25402005181163513396e0b72

  • SSDEEP

    6144:KbE42KWdacnZJqwCQttBaaczwDirAQ3DeQ7DluUBq2:y2KWdacnXqwCwt4acxAQ3DeGDlt7

Malware Config

Targets

    • Target

      beae0cbb1b7753ca349aca996adff620N.exe

    • Size

      500KB

    • MD5

      beae0cbb1b7753ca349aca996adff620

    • SHA1

      81c38e8cb79473a12d2ab882369f099c77ba4f84

    • SHA256

      677498cfcf2c19195fd4087e90e7127410497b2efd6cd405c7f63e3674a5047d

    • SHA512

      07bc9e3bf6899fb550d0bdf0fa2a6c0e6a49789bb038e565ae9b351c62b5b385034527214c03c7d37ed536c52b145b88451fecb25402005181163513396e0b72

    • SSDEEP

      6144:KbE42KWdacnZJqwCQttBaaczwDirAQ3DeQ7DluUBq2:y2KWdacnXqwCwt4acxAQ3DeGDlt7

    • Renames multiple (1391) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks