General

  • Target

    425eae64864fa3c9233e6c00a41d5ec0N.exe

  • Size

    26KB

  • Sample

    240902-r57byatdje

  • MD5

    425eae64864fa3c9233e6c00a41d5ec0

  • SHA1

    7818a68e4b1e8b8d1ebccf4242e4f10271050bfc

  • SHA256

    622a5da08bb5fa5b476b765b932e0e5645b2489f7760f116b1a6f80e86bf9aa2

  • SHA512

    a0d637ae639f07afa2ca5b4d4d9e82bdd9c4c5ffba180c31a03aa351b5731e6cf20426ad882b902c17f52c91f253bb268942c75769c346d82c3910c70959ed1c

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcI90mkmp:CTW7JJ7TqLy

Malware Config

Targets

    • Target

      425eae64864fa3c9233e6c00a41d5ec0N.exe

    • Size

      26KB

    • MD5

      425eae64864fa3c9233e6c00a41d5ec0

    • SHA1

      7818a68e4b1e8b8d1ebccf4242e4f10271050bfc

    • SHA256

      622a5da08bb5fa5b476b765b932e0e5645b2489f7760f116b1a6f80e86bf9aa2

    • SHA512

      a0d637ae639f07afa2ca5b4d4d9e82bdd9c4c5ffba180c31a03aa351b5731e6cf20426ad882b902c17f52c91f253bb268942c75769c346d82c3910c70959ed1c

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcI90mkmp:CTW7JJ7TqLy

    • Renames multiple (3407) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks