General

  • Target

    4c7e6e3ca396a0baa145cca0a731f140N.exe

  • Size

    56KB

  • Sample

    240905-phzmga1fmc

  • MD5

    4c7e6e3ca396a0baa145cca0a731f140

  • SHA1

    570024b3d1934fa63af78422f7e7e6a1b3754164

  • SHA256

    97ff492d6debdc6402f83eea53cfa614c0256769f9ca242b53fc4e2c4b62152c

  • SHA512

    a621683879dda5c21b37b27e8a71a65166bef69b658c7d43717a670d576d8f9b37784796453b1c980cfb6918d12773494605a7ce4e8a71943984e39f9d93c50f

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATNydWK9WKF9ADJ8:V7Zf/FAxTWoJJZENTNyoKIKMW

Malware Config

Targets

    • Target

      4c7e6e3ca396a0baa145cca0a731f140N.exe

    • Size

      56KB

    • MD5

      4c7e6e3ca396a0baa145cca0a731f140

    • SHA1

      570024b3d1934fa63af78422f7e7e6a1b3754164

    • SHA256

      97ff492d6debdc6402f83eea53cfa614c0256769f9ca242b53fc4e2c4b62152c

    • SHA512

      a621683879dda5c21b37b27e8a71a65166bef69b658c7d43717a670d576d8f9b37784796453b1c980cfb6918d12773494605a7ce4e8a71943984e39f9d93c50f

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATNydWK9WKF9ADJ8:V7Zf/FAxTWoJJZENTNyoKIKMW

    • Renames multiple (414) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks