General

  • Target

    8942320422a09b7befc8a65180ab13f0N.exe

  • Size

    1.1MB

  • Sample

    240902-psv22azfnl

  • MD5

    8942320422a09b7befc8a65180ab13f0

  • SHA1

    f3b3ce5126610e014d93eca12c2aad281bbe8b6c

  • SHA256

    b179118be5268a627c5d0fbcd90c5006de5ed8c2dd42214709de11380e542434

  • SHA512

    7b69b23a79e82de07c91bc4ca0af03c19622e8753a15a9fbe510564b44e761b54cd6c437441c4f34825d3968461159e8e8ac15be3ee16922691e3d8847827e15

  • SSDEEP

    6144:K3tt+TDRDfhDizL95yO/j1/YcGzbOpkBRDZUVu8Oh1gsDCvijbEas6VjZW1Ugl:Af+BDfhmzLnyO/j1/tUSpknOVxsgZWgl

Malware Config

Targets

    • Target

      8942320422a09b7befc8a65180ab13f0N.exe

    • Size

      1.1MB

    • MD5

      8942320422a09b7befc8a65180ab13f0

    • SHA1

      f3b3ce5126610e014d93eca12c2aad281bbe8b6c

    • SHA256

      b179118be5268a627c5d0fbcd90c5006de5ed8c2dd42214709de11380e542434

    • SHA512

      7b69b23a79e82de07c91bc4ca0af03c19622e8753a15a9fbe510564b44e761b54cd6c437441c4f34825d3968461159e8e8ac15be3ee16922691e3d8847827e15

    • SSDEEP

      6144:K3tt+TDRDfhDizL95yO/j1/YcGzbOpkBRDZUVu8Oh1gsDCvijbEas6VjZW1Ugl:Af+BDfhmzLnyO/j1/tUSpknOVxsgZWgl

    • Renames multiple (522) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks