General

  • Target

    719d98b8993a180aebd3f371bb3879c0N.exe

  • Size

    89KB

  • Sample

    240903-cwccwawclh

  • MD5

    719d98b8993a180aebd3f371bb3879c0

  • SHA1

    adbf65e155c25d00115bd8ef1f65242e3181a6e2

  • SHA256

    d59908a886d6a962e6872af60d6c5abc6f9b37e058cd16ec96c7eedea1af2c7e

  • SHA512

    fa18b35345c33ad1bcd91f587d96e06a2ad401071fbb435f19c8c2062f2bd1a1a3d328971a5fb0850bd4cc7effff51cff67c0d96fd3b370d06a4bc896bac0b6c

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8IZT+JZkeZrAJZkeZrI:fnyiQSo7ZA

Malware Config

Targets

    • Target

      719d98b8993a180aebd3f371bb3879c0N.exe

    • Size

      89KB

    • MD5

      719d98b8993a180aebd3f371bb3879c0

    • SHA1

      adbf65e155c25d00115bd8ef1f65242e3181a6e2

    • SHA256

      d59908a886d6a962e6872af60d6c5abc6f9b37e058cd16ec96c7eedea1af2c7e

    • SHA512

      fa18b35345c33ad1bcd91f587d96e06a2ad401071fbb435f19c8c2062f2bd1a1a3d328971a5fb0850bd4cc7effff51cff67c0d96fd3b370d06a4bc896bac0b6c

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8IZT+JZkeZrAJZkeZrI:fnyiQSo7ZA

    • Renames multiple (3130) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks