General

  • Target

    a8a146e1d69af8018d7bdcc5ae5f7820N.exe

  • Size

    64KB

  • Sample

    240903-wrq51stgkc

  • MD5

    a8a146e1d69af8018d7bdcc5ae5f7820

  • SHA1

    e2774b808399cce86490fa3903aa524995568ca6

  • SHA256

    0d6426cb49f817059205e59c9eb65255968b1bd24ffdaf2a13b0c580bcf58057

  • SHA512

    724bf16b7bf67be2749adadd5e0c7ba85079d09bbfc000be5b9415117a45e8af49ccb2ea7c6b4887f74921da14f37ffd37f183978ee040eb50c64dd6cd1ef9cf

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATBaMYioGXOaiJfW:V7Zf/FAxTWoJJZENTBTYM2lt8

Malware Config

Targets

    • Target

      a8a146e1d69af8018d7bdcc5ae5f7820N.exe

    • Size

      64KB

    • MD5

      a8a146e1d69af8018d7bdcc5ae5f7820

    • SHA1

      e2774b808399cce86490fa3903aa524995568ca6

    • SHA256

      0d6426cb49f817059205e59c9eb65255968b1bd24ffdaf2a13b0c580bcf58057

    • SHA512

      724bf16b7bf67be2749adadd5e0c7ba85079d09bbfc000be5b9415117a45e8af49ccb2ea7c6b4887f74921da14f37ffd37f183978ee040eb50c64dd6cd1ef9cf

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATBaMYioGXOaiJfW:V7Zf/FAxTWoJJZENTBTYM2lt8

    • Renames multiple (3269) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks