General

  • Target

    ce784f0f41fb8c21b9b5e01f0022d220N.exe

  • Size

    78KB

  • Sample

    240903-yg26mswfkb

  • MD5

    ce784f0f41fb8c21b9b5e01f0022d220

  • SHA1

    8583d80bf1b973c6f3488e43c47571661e364400

  • SHA256

    a6950c674ec5b56f236be04066da3d5fa311fb551b9fc4191b083115f589c43f

  • SHA512

    400b5f936d6562a852a1dc8730a29ca948e567de1d26e75788844cd6c97314a64e09045e533bfbeea0bb6bb3851c77837d5d5baa7fc3b259d5661f813847a89b

  • SSDEEP

    1536:V7Zf/FAxTWoJJ7TzJvTW7JJ7TzJixbDxb2:fny1+AxbDxb2

Malware Config

Targets

    • Target

      ce784f0f41fb8c21b9b5e01f0022d220N.exe

    • Size

      78KB

    • MD5

      ce784f0f41fb8c21b9b5e01f0022d220

    • SHA1

      8583d80bf1b973c6f3488e43c47571661e364400

    • SHA256

      a6950c674ec5b56f236be04066da3d5fa311fb551b9fc4191b083115f589c43f

    • SHA512

      400b5f936d6562a852a1dc8730a29ca948e567de1d26e75788844cd6c97314a64e09045e533bfbeea0bb6bb3851c77837d5d5baa7fc3b259d5661f813847a89b

    • SSDEEP

      1536:V7Zf/FAxTWoJJ7TzJvTW7JJ7TzJixbDxb2:fny1+AxbDxb2

    • Renames multiple (2911) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks