General

  • Target

    108ef137ce9fcf6667b98169d29346f0N.exe

  • Size

    76KB

  • Sample

    240905-rs9xassfkr

  • MD5

    108ef137ce9fcf6667b98169d29346f0

  • SHA1

    d791fc120ca2c9b08182e56e8a5fe91518210e82

  • SHA256

    28a2f38b8b28d061ec0ba7056b6a7b00e398513c5ecfc6912754797c35356281

  • SHA512

    1368dc434cd398c0a2290fa5df097929ba9404924b89869ecb66aa6a8570a6db5e8d4ce7a954092143e21e890549e2e98f829ef2f7a3cdcf977f5cdc4ad8921b

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcwBcCBcw/tio/tigcssAS29:V7Zf/FAxTWoJJ7TTQoQgcssDTsDV

Malware Config

Targets

    • Target

      108ef137ce9fcf6667b98169d29346f0N.exe

    • Size

      76KB

    • MD5

      108ef137ce9fcf6667b98169d29346f0

    • SHA1

      d791fc120ca2c9b08182e56e8a5fe91518210e82

    • SHA256

      28a2f38b8b28d061ec0ba7056b6a7b00e398513c5ecfc6912754797c35356281

    • SHA512

      1368dc434cd398c0a2290fa5df097929ba9404924b89869ecb66aa6a8570a6db5e8d4ce7a954092143e21e890549e2e98f829ef2f7a3cdcf977f5cdc4ad8921b

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcwBcCBcw/tio/tigcssAS29:V7Zf/FAxTWoJJ7TTQoQgcssDTsDV

    • Renames multiple (3091) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks