General

  • Target

    b76123caec05084ab494016c05e6eb00N.exe

  • Size

    115KB

  • Sample

    240905-armlyayhkq

  • MD5

    b76123caec05084ab494016c05e6eb00

  • SHA1

    9b819bdfdffb43fd82060db3ff492b7ad5555cbe

  • SHA256

    8ba41bee285416b34bfb6df32076105da63d466fe1efbd2e60c08c02b2c7d64a

  • SHA512

    6767267fa4e6e0c6dc4b9f287dff51f53794cb7bea5e456b868d8841de3bab5662dec8ac655ef7b16035180e265e1a44d16e2d587a7c9e8b758e8b8afd0b9bcc

  • SSDEEP

    1536:V7Zf/FAxTWoJJB7LD2I2IbSfv/i+vrA+SCm7x1wzu:fny1tD33bSfni+9m7x1wzu

Malware Config

Targets

    • Target

      b76123caec05084ab494016c05e6eb00N.exe

    • Size

      115KB

    • MD5

      b76123caec05084ab494016c05e6eb00

    • SHA1

      9b819bdfdffb43fd82060db3ff492b7ad5555cbe

    • SHA256

      8ba41bee285416b34bfb6df32076105da63d466fe1efbd2e60c08c02b2c7d64a

    • SHA512

      6767267fa4e6e0c6dc4b9f287dff51f53794cb7bea5e456b868d8841de3bab5662dec8ac655ef7b16035180e265e1a44d16e2d587a7c9e8b758e8b8afd0b9bcc

    • SSDEEP

      1536:V7Zf/FAxTWoJJB7LD2I2IbSfv/i+vrA+SCm7x1wzu:fny1tD33bSfni+9m7x1wzu

    • Renames multiple (3091) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks