General

  • Target

    f1b528d600527296405d2b8e55fa24a0N.exe

  • Size

    149KB

  • Sample

    240823-aqakzswapb

  • MD5

    f1b528d600527296405d2b8e55fa24a0

  • SHA1

    6e0f9f778626a7bdf30c99d60128bfa580e23901

  • SHA256

    202c7b3765671325b858e6b444da4d50cb4facbacfea20787f8e2067edb42080

  • SHA512

    830c200b7f9c721a3fcffa12e93bd17b4610e790056f7d8abeea32c6d9bee45309e2a74e283d74b548bc45279320f4c5b27376e103c0b02001060a02971c8e29

  • SSDEEP

    1536:a7ZyqaFAxTWH1++PJHJXA/OsIZfzc3/Q8zx4Ld05spgzKzIzbgZWj:enaypQSoDLd058gzrj

Malware Config

Targets

    • Target

      f1b528d600527296405d2b8e55fa24a0N.exe

    • Size

      149KB

    • MD5

      f1b528d600527296405d2b8e55fa24a0

    • SHA1

      6e0f9f778626a7bdf30c99d60128bfa580e23901

    • SHA256

      202c7b3765671325b858e6b444da4d50cb4facbacfea20787f8e2067edb42080

    • SHA512

      830c200b7f9c721a3fcffa12e93bd17b4610e790056f7d8abeea32c6d9bee45309e2a74e283d74b548bc45279320f4c5b27376e103c0b02001060a02971c8e29

    • SSDEEP

      1536:a7ZyqaFAxTWH1++PJHJXA/OsIZfzc3/Q8zx4Ld05spgzKzIzbgZWj:enaypQSoDLd058gzrj

    • Renames multiple (2813) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks