General

  • Target

    b57568bdb2ac3ec4a6281a044c2e2390N.exe

  • Size

    45KB

  • Sample

    240906-3wsb7svald

  • MD5

    b57568bdb2ac3ec4a6281a044c2e2390

  • SHA1

    d17c217709d89991fa6423c2e069609a2c3ffbf8

  • SHA256

    9ca5bd6663aa8a36ff24b9074cdbf020da4fb3a17cd7450c94b704219541f938

  • SHA512

    bc5c24c94765f5d027e695ce39faa187d81e7eeb468ec9c61b076c49e52157f2c0cb5b031564626b2c253e109015c1cbec837aef3d65f1b2afb4e91cb65675e5

  • SSDEEP

    768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATNydWK9WKvhWSwSKV00jzja:CTW7JJZENTNyoKIKMSwSKW03G

Malware Config

Targets

    • Target

      b57568bdb2ac3ec4a6281a044c2e2390N.exe

    • Size

      45KB

    • MD5

      b57568bdb2ac3ec4a6281a044c2e2390

    • SHA1

      d17c217709d89991fa6423c2e069609a2c3ffbf8

    • SHA256

      9ca5bd6663aa8a36ff24b9074cdbf020da4fb3a17cd7450c94b704219541f938

    • SHA512

      bc5c24c94765f5d027e695ce39faa187d81e7eeb468ec9c61b076c49e52157f2c0cb5b031564626b2c253e109015c1cbec837aef3d65f1b2afb4e91cb65675e5

    • SSDEEP

      768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATNydWK9WKvhWSwSKV00jzja:CTW7JJZENTNyoKIKMSwSKW03G

    • Renames multiple (2750) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks