General

  • Target

    e6d535160c3de4f60b8bbffafbe87a40N.exe

  • Size

    57KB

  • Sample

    240905-wwnkpawgpr

  • MD5

    e6d535160c3de4f60b8bbffafbe87a40

  • SHA1

    cb067ce591ef1cd5e4396d78bce4e4f38225af0b

  • SHA256

    7b8e389b672e84bf67589bf24ec0c11d7deb0e1893800378cbbabd7519ff5c56

  • SHA512

    8303768044cc5a5bc7b56ea8a27c925b74f4e8ea2d65fa4bb7d24e2888c6c255dcdc1d5d0cf75413cec6452b8b10914cc2ab4c859cab8c40f372ec9b1cb86cd7

  • SSDEEP

    768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFIz:CTWn1++PJHJXA/OsIZfzc3/Q8IZTd

Malware Config

Targets

    • Target

      e6d535160c3de4f60b8bbffafbe87a40N.exe

    • Size

      57KB

    • MD5

      e6d535160c3de4f60b8bbffafbe87a40

    • SHA1

      cb067ce591ef1cd5e4396d78bce4e4f38225af0b

    • SHA256

      7b8e389b672e84bf67589bf24ec0c11d7deb0e1893800378cbbabd7519ff5c56

    • SHA512

      8303768044cc5a5bc7b56ea8a27c925b74f4e8ea2d65fa4bb7d24e2888c6c255dcdc1d5d0cf75413cec6452b8b10914cc2ab4c859cab8c40f372ec9b1cb86cd7

    • SSDEEP

      768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFIz:CTWn1++PJHJXA/OsIZfzc3/Q8IZTd

    • Renames multiple (3139) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks