General

  • Target

    692f5760401523b2b5bf26e9096409b0N.exe

  • Size

    22KB

  • Sample

    240820-wzsc2swgqg

  • MD5

    692f5760401523b2b5bf26e9096409b0

  • SHA1

    3111c4430435cf7f04cb2588d72d5f083a68dd8b

  • SHA256

    f0e7f3dd215dc7c1db3086ca01b99fefda918ac2f09d3449c0bc4ee6f3c9c798

  • SHA512

    8e13b8626bfddd1bc524067146485c88e49f1a637e4a427d9993e83137e7c22bb3b12dbc69f346bbb221abdc7416fa5109ece1fd53ae8d8159559364dfa6ed09

  • SSDEEP

    384:QOlIBXDaU7CPKK0TIhfJJ1Evd5BvhzaM9mSIEvd5BvhzaM9mSsxmMxm9+9i:kBT37CPKKdJJ1EXBwzEXBwdcMcI9i

Malware Config

Targets

    • Target

      692f5760401523b2b5bf26e9096409b0N.exe

    • Size

      22KB

    • MD5

      692f5760401523b2b5bf26e9096409b0

    • SHA1

      3111c4430435cf7f04cb2588d72d5f083a68dd8b

    • SHA256

      f0e7f3dd215dc7c1db3086ca01b99fefda918ac2f09d3449c0bc4ee6f3c9c798

    • SHA512

      8e13b8626bfddd1bc524067146485c88e49f1a637e4a427d9993e83137e7c22bb3b12dbc69f346bbb221abdc7416fa5109ece1fd53ae8d8159559364dfa6ed09

    • SSDEEP

      384:QOlIBXDaU7CPKK0TIhfJJ1Evd5BvhzaM9mSIEvd5BvhzaM9mSsxmMxm9+9i:kBT37CPKKdJJ1EXBwzEXBwdcMcI9i

    • Renames multiple (510) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks