General

  • Target

    ce8123e81cb5c46c662e59606cbf4880N.exe

  • Size

    138KB

  • Sample

    240821-f1fsmsvgkj

  • MD5

    ce8123e81cb5c46c662e59606cbf4880

  • SHA1

    ce8ec351bab4665467b936c7a5e8a9de05e29d94

  • SHA256

    cb692cba6a3876fdc29dff20cad813fbf547418dc34c61208f29a75f575dc17a

  • SHA512

    0f32ac9e3f4ee1813da669bed322466fa955edc80452bb60a38b4f4c1d54a42f06845f5994a7d7f248399b0fdaf9ea703d30ecceb17819f5ae723f71069489cc

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxY5eYvTWn1++PJHJXA/OsIZfzc3/Q83:fnyiQSox5jQSox5g

Malware Config

Targets

    • Target

      ce8123e81cb5c46c662e59606cbf4880N.exe

    • Size

      138KB

    • MD5

      ce8123e81cb5c46c662e59606cbf4880

    • SHA1

      ce8ec351bab4665467b936c7a5e8a9de05e29d94

    • SHA256

      cb692cba6a3876fdc29dff20cad813fbf547418dc34c61208f29a75f575dc17a

    • SHA512

      0f32ac9e3f4ee1813da669bed322466fa955edc80452bb60a38b4f4c1d54a42f06845f5994a7d7f248399b0fdaf9ea703d30ecceb17819f5ae723f71069489cc

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxY5eYvTWn1++PJHJXA/OsIZfzc3/Q83:fnyiQSox5jQSox5g

    • Renames multiple (2925) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks