General

  • Target

    a842b2fd4d40941d0bd335bea890b0f0N.exe

  • Size

    66KB

  • Sample

    240821-gpcghswgmp

  • MD5

    a842b2fd4d40941d0bd335bea890b0f0

  • SHA1

    f41e6092f1640edd0693936295c55d6757ed00f9

  • SHA256

    4ceb8c0e19ac492f0e403594f561827c9517ed5f29567f8d02672459547c7e87

  • SHA512

    23d48f41016b0a6a00fc3c7efa86ebdb4fe2da059bcf2b566cfb4cfc5ecd09badfb0bea308e90ea29083b19443a2c2722fa019ad922cf0d8a1dab0b81729dd99

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjSEXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rQ:V7Zf/FAxTWgGpG8nw

Malware Config

Targets

    • Target

      a842b2fd4d40941d0bd335bea890b0f0N.exe

    • Size

      66KB

    • MD5

      a842b2fd4d40941d0bd335bea890b0f0

    • SHA1

      f41e6092f1640edd0693936295c55d6757ed00f9

    • SHA256

      4ceb8c0e19ac492f0e403594f561827c9517ed5f29567f8d02672459547c7e87

    • SHA512

      23d48f41016b0a6a00fc3c7efa86ebdb4fe2da059bcf2b566cfb4cfc5ecd09badfb0bea308e90ea29083b19443a2c2722fa019ad922cf0d8a1dab0b81729dd99

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjSEXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rQ:V7Zf/FAxTWgGpG8nw

    • Renames multiple (487) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks