General

  • Target

    08638a745d358b4f0be3ada3a7918c00N.exe

  • Size

    150KB

  • Sample

    240823-tt68xaxclq

  • MD5

    08638a745d358b4f0be3ada3a7918c00

  • SHA1

    c1c9a8d7319b4d2cb194e490cd55c2d70028e921

  • SHA256

    bcb7c11f0ae9b7959641fb8b0753fb093eaea337a3cbed5e201f86c3f5754287

  • SHA512

    a437fd7ac20964b5ea74991916dc0ed0d6f8f5586b070a01f511ad4355efaf0b8ca1f6def54cbde6bc4fabb54e1d3727a53733940ddeff8b94b478d2452c7f0b

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxSL8TWn1++PJHJXA/OsIZfzc3/Q8zxK:fnyiQSo5LcQSo5LJ

Malware Config

Targets

    • Target

      08638a745d358b4f0be3ada3a7918c00N.exe

    • Size

      150KB

    • MD5

      08638a745d358b4f0be3ada3a7918c00

    • SHA1

      c1c9a8d7319b4d2cb194e490cd55c2d70028e921

    • SHA256

      bcb7c11f0ae9b7959641fb8b0753fb093eaea337a3cbed5e201f86c3f5754287

    • SHA512

      a437fd7ac20964b5ea74991916dc0ed0d6f8f5586b070a01f511ad4355efaf0b8ca1f6def54cbde6bc4fabb54e1d3727a53733940ddeff8b94b478d2452c7f0b

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxSL8TWn1++PJHJXA/OsIZfzc3/Q8zxK:fnyiQSo5LcQSo5LJ

    • Renames multiple (2799) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks