General

  • Target

    f9dfe0b894771904152facf6c52a7cf0N.exe

  • Size

    41KB

  • Sample

    240902-a1bk2axdna

  • MD5

    f9dfe0b894771904152facf6c52a7cf0

  • SHA1

    b15832b5f04b19247e181a72397f6eca9eb05221

  • SHA256

    9aef7eff088b139001370936946b357e94ec0d325b6355f5532fddecf5ddc354

  • SHA512

    e3d06b48ed8ef29ce8b88595f4329785226772d5aab9f00350bc3e680ac4072d3953d7ac37e970ce488336570b39e80f039feafafab34bbffa0ff0bdb3a3cc28

  • SSDEEP

    768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATBWvyBh85c54wEqfqE:CTW7JJZENTBWv36xCE

Malware Config

Targets

    • Target

      f9dfe0b894771904152facf6c52a7cf0N.exe

    • Size

      41KB

    • MD5

      f9dfe0b894771904152facf6c52a7cf0

    • SHA1

      b15832b5f04b19247e181a72397f6eca9eb05221

    • SHA256

      9aef7eff088b139001370936946b357e94ec0d325b6355f5532fddecf5ddc354

    • SHA512

      e3d06b48ed8ef29ce8b88595f4329785226772d5aab9f00350bc3e680ac4072d3953d7ac37e970ce488336570b39e80f039feafafab34bbffa0ff0bdb3a3cc28

    • SSDEEP

      768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATBWvyBh85c54wEqfqE:CTW7JJZENTBWv36xCE

    • Renames multiple (3419) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks