General

  • Target

    946cbd469246c88e78e77c41fdbdc780N.exe

  • Size

    53KB

  • Sample

    240904-zmpyyawcpl

  • MD5

    946cbd469246c88e78e77c41fdbdc780

  • SHA1

    1f2c1be2117a211ac11e86f123f870486d47d65e

  • SHA256

    d7ca6d9d530150fe3a3f645713892515adaaaf74380beaad9afa504130325df5

  • SHA512

    2c0437f018478b1b6c65f14bc71fb3ae68d1a21432047d354f17ec9a9224f96e2b84ddb8165e575168c83d2953e82844188600018c349d54c9092c30e2bb2693

  • SSDEEP

    768:kBT37CPKK1EXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rcu90TKe+0TKeinMdD:CTWUnMdyGdyoIOIZgv

Malware Config

Targets

    • Target

      946cbd469246c88e78e77c41fdbdc780N.exe

    • Size

      53KB

    • MD5

      946cbd469246c88e78e77c41fdbdc780

    • SHA1

      1f2c1be2117a211ac11e86f123f870486d47d65e

    • SHA256

      d7ca6d9d530150fe3a3f645713892515adaaaf74380beaad9afa504130325df5

    • SHA512

      2c0437f018478b1b6c65f14bc71fb3ae68d1a21432047d354f17ec9a9224f96e2b84ddb8165e575168c83d2953e82844188600018c349d54c9092c30e2bb2693

    • SSDEEP

      768:kBT37CPKK1EXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rcu90TKe+0TKeinMdD:CTWUnMdyGdyoIOIZgv

    • Renames multiple (3264) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks