General

  • Target

    bae7405900f3f3bb51bc17ec8d306ce0N.exe

  • Size

    647KB

  • Sample

    240905-eyks5stfpa

  • MD5

    bae7405900f3f3bb51bc17ec8d306ce0

  • SHA1

    c7c9a34985005451a93372e8bd771a1215023532

  • SHA256

    c006173d1459d6872688f755e70580152801f0d25ec011c5f080d58b1c024977

  • SHA512

    9492a50404c9b3bfb520e6fbb11d946123977953841fe7898a5b89d8a15cd2f97a60412381e48e8fc7f3abcda85ea11131577303fe54cb0c9c3241954112ee97

  • SSDEEP

    6144:KbEj/nn4LlljrgVpPDe2C+Dv5TBhwZzlm:dnn4UV1DnC+DPhwZY

Malware Config

Targets

    • Target

      bae7405900f3f3bb51bc17ec8d306ce0N.exe

    • Size

      647KB

    • MD5

      bae7405900f3f3bb51bc17ec8d306ce0

    • SHA1

      c7c9a34985005451a93372e8bd771a1215023532

    • SHA256

      c006173d1459d6872688f755e70580152801f0d25ec011c5f080d58b1c024977

    • SHA512

      9492a50404c9b3bfb520e6fbb11d946123977953841fe7898a5b89d8a15cd2f97a60412381e48e8fc7f3abcda85ea11131577303fe54cb0c9c3241954112ee97

    • SSDEEP

      6144:KbEj/nn4LlljrgVpPDe2C+Dv5TBhwZzlm:dnn4UV1DnC+DPhwZY

    • Renames multiple (1174) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks