General

  • Target

    43cf6a118438bab9f38f3e8f3bf46150N.exe

  • Size

    58KB

  • Sample

    240904-jv5flawgkl

  • MD5

    43cf6a118438bab9f38f3e8f3bf46150

  • SHA1

    852077483bf15d9684a6ac050529171d0263453e

  • SHA256

    6b13be9f29a56f850950a53b9896b2e151187dda33caf07b46b7d26c61d7b175

  • SHA512

    e450ef2127170d6356fd1ca4f5ae8a0b2ca7deb6465921cc64bcf6cbd3a35037bdbb0cd277381bf0ac4f930554b00f846a63c0897f2c13666df8eaaf5e0c26f9

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcwBcCBcw/tio/tiPUN+:V7Zf/FAxTWoJJ7TTQoQcN+

Malware Config

Targets

    • Target

      43cf6a118438bab9f38f3e8f3bf46150N.exe

    • Size

      58KB

    • MD5

      43cf6a118438bab9f38f3e8f3bf46150

    • SHA1

      852077483bf15d9684a6ac050529171d0263453e

    • SHA256

      6b13be9f29a56f850950a53b9896b2e151187dda33caf07b46b7d26c61d7b175

    • SHA512

      e450ef2127170d6356fd1ca4f5ae8a0b2ca7deb6465921cc64bcf6cbd3a35037bdbb0cd277381bf0ac4f930554b00f846a63c0897f2c13666df8eaaf5e0c26f9

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcwBcCBcw/tio/tiPUN+:V7Zf/FAxTWoJJ7TTQoQcN+

    • Renames multiple (3258) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks