General

  • Target

    106d811fd7674d9946f10820ddb23600N.exe

  • Size

    142KB

  • Sample

    240821-ph79lsyala

  • MD5

    106d811fd7674d9946f10820ddb23600

  • SHA1

    67439a67f86a96addefb4da882bb2a2b92c88e21

  • SHA256

    f1b27231761d75c473aa36bdfe591b17d19a3e23bc233c953a5467a238505f56

  • SHA512

    646cea1113778a25efaa3678ae490c104f08ca82711cda60b9275ef18d23d3bee93be9cdba199f07f8a4d9de052fbd818f2862859a8e524e9a189879ff68f537

  • SSDEEP

    1536:V7Zf/FAxTWoJJ7TPzhypOpbwIt6WDxcRGv6L5CjmNw0rXnZkw:fny1vUpO6S6WDuRGv6L52gbB

Malware Config

Targets

    • Target

      106d811fd7674d9946f10820ddb23600N.exe

    • Size

      142KB

    • MD5

      106d811fd7674d9946f10820ddb23600

    • SHA1

      67439a67f86a96addefb4da882bb2a2b92c88e21

    • SHA256

      f1b27231761d75c473aa36bdfe591b17d19a3e23bc233c953a5467a238505f56

    • SHA512

      646cea1113778a25efaa3678ae490c104f08ca82711cda60b9275ef18d23d3bee93be9cdba199f07f8a4d9de052fbd818f2862859a8e524e9a189879ff68f537

    • SSDEEP

      1536:V7Zf/FAxTWoJJ7TPzhypOpbwIt6WDxcRGv6L5CjmNw0rXnZkw:fny1vUpO6S6WDuRGv6L52gbB

    • Renames multiple (2849) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks