General

  • Target

    864a83589ac48df58e97c9bc1218a310N.exe

  • Size

    43KB

  • Sample

    240829-qqw2zstfkh

  • MD5

    864a83589ac48df58e97c9bc1218a310

  • SHA1

    a7c99b346d7ae0fa4c77e65ed62947d0158f4a27

  • SHA256

    431150d238dbab3011275745e8d9b19323ee52c25c5d25c52e2d48e6d89623d7

  • SHA512

    37e0edd10b68542f44cc1cfc965355ac94e27425e99d81d66a934593a620c5fa47d5af37c22d48ff9ef383ffb0dafa6aef8842b14f9bf7536002ebf4f297e1bb

  • SSDEEP

    768:kBT37CPKK1EXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rcu90TKe+0TKeinMdc:CTWUnMdyGdyoIOIqo

Malware Config

Targets

    • Target

      864a83589ac48df58e97c9bc1218a310N.exe

    • Size

      43KB

    • MD5

      864a83589ac48df58e97c9bc1218a310

    • SHA1

      a7c99b346d7ae0fa4c77e65ed62947d0158f4a27

    • SHA256

      431150d238dbab3011275745e8d9b19323ee52c25c5d25c52e2d48e6d89623d7

    • SHA512

      37e0edd10b68542f44cc1cfc965355ac94e27425e99d81d66a934593a620c5fa47d5af37c22d48ff9ef383ffb0dafa6aef8842b14f9bf7536002ebf4f297e1bb

    • SSDEEP

      768:kBT37CPKK1EXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rcu90TKe+0TKeinMdc:CTWUnMdyGdyoIOIqo

    • Renames multiple (3244) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks