General

  • Target

    389f50296277da66e9a670b63994b360N.exe

  • Size

    24KB

  • Sample

    240902-ca4j8szamf

  • MD5

    389f50296277da66e9a670b63994b360

  • SHA1

    085afd44d6de76ae62c2992917703f1a122d3845

  • SHA256

    f9cdd249a729a3ccd7a949707c00f260f361af746cbc3ff37b6c3a9ede51b813

  • SHA512

    70f8901527a29835bb26f5d43aa3a892b8e96b52b65abce10332bac7720f3f613a6b0dc3d9e96f52c216a70e2c0ce6b25df2b3b75e8b1f565d164e3330c772d4

  • SSDEEP

    384:QOlIBXDaU7CPKK0TIhfJJ1Evd5BvhzaM9mSIEvd5BvhzaM9mSsxmMxm9+9jTf:kBT37CPKKdJJ1EXBwzEXBwdcMcI9jTf

Malware Config

Targets

    • Target

      389f50296277da66e9a670b63994b360N.exe

    • Size

      24KB

    • MD5

      389f50296277da66e9a670b63994b360

    • SHA1

      085afd44d6de76ae62c2992917703f1a122d3845

    • SHA256

      f9cdd249a729a3ccd7a949707c00f260f361af746cbc3ff37b6c3a9ede51b813

    • SHA512

      70f8901527a29835bb26f5d43aa3a892b8e96b52b65abce10332bac7720f3f613a6b0dc3d9e96f52c216a70e2c0ce6b25df2b3b75e8b1f565d164e3330c772d4

    • SSDEEP

      384:QOlIBXDaU7CPKK0TIhfJJ1Evd5BvhzaM9mSIEvd5BvhzaM9mSsxmMxm9+9jTf:kBT37CPKKdJJ1EXBwzEXBwdcMcI9jTf

    • Renames multiple (2934) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks