General

  • Target

    3a2129e541784f6aa314c450ec5197a0N.exe

  • Size

    30KB

  • Sample

    240904-qat8fszhjk

  • MD5

    3a2129e541784f6aa314c450ec5197a0

  • SHA1

    6794959c0b45fcf42733aeaf6fb2ba57f2916c0c

  • SHA256

    18518c3c99ac327f3a72f2707368acbc89a68472d8ae14b8b283f2074fc0ce7f

  • SHA512

    6b5732f9b7680963c5953fd51ffc051c8c3f450d83cde7a40fc4e918e62456e1b43c76236ef12b4d2437276434d6ac077d578d51f50dc26c8b84582ef906244e

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcI951ScN:CTW7JJ7TzUcN

Malware Config

Targets

    • Target

      3a2129e541784f6aa314c450ec5197a0N.exe

    • Size

      30KB

    • MD5

      3a2129e541784f6aa314c450ec5197a0

    • SHA1

      6794959c0b45fcf42733aeaf6fb2ba57f2916c0c

    • SHA256

      18518c3c99ac327f3a72f2707368acbc89a68472d8ae14b8b283f2074fc0ce7f

    • SHA512

      6b5732f9b7680963c5953fd51ffc051c8c3f450d83cde7a40fc4e918e62456e1b43c76236ef12b4d2437276434d6ac077d578d51f50dc26c8b84582ef906244e

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcI951ScN:CTW7JJ7TzUcN

    • Renames multiple (3436) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks