General

  • Target

    614ce0008868275c9954f0c2823d8650N.exe

  • Size

    28KB

  • Sample

    240821-x398pszdmk

  • MD5

    614ce0008868275c9954f0c2823d8650

  • SHA1

    7ed9010baeb4a288ffe95720d6f682e8534fd1b0

  • SHA256

    d7a7efcbe7d0c2a1d1b8eff6e1f7d140855340cbba7da1087cc2c6de3c280566

  • SHA512

    c12572fa58154b495a9c07b1447af22be85dd1e6e4d6a47ec446be38af53ed49697e3095388eb52a31c03364a06069b168054a04bb7e8fa337c8b0303067600f

  • SSDEEP

    384:QOlIBXDaU7CPKK0TIhfJJ1Evd5BvhzaM9mSIEvd5BvhzaM9mSsxmMxm9+9IXC:kBT37CPKKdJJ1EXBwzEXBwdcMcI9IXC

Malware Config

Targets

    • Target

      614ce0008868275c9954f0c2823d8650N.exe

    • Size

      28KB

    • MD5

      614ce0008868275c9954f0c2823d8650

    • SHA1

      7ed9010baeb4a288ffe95720d6f682e8534fd1b0

    • SHA256

      d7a7efcbe7d0c2a1d1b8eff6e1f7d140855340cbba7da1087cc2c6de3c280566

    • SHA512

      c12572fa58154b495a9c07b1447af22be85dd1e6e4d6a47ec446be38af53ed49697e3095388eb52a31c03364a06069b168054a04bb7e8fa337c8b0303067600f

    • SSDEEP

      384:QOlIBXDaU7CPKK0TIhfJJ1Evd5BvhzaM9mSIEvd5BvhzaM9mSsxmMxm9+9IXC:kBT37CPKKdJJ1EXBwzEXBwdcMcI9IXC

    • Renames multiple (3370) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks