General

  • Target

    abb37d2dfc116a7fc3560112d2a82060N.exe

  • Size

    139KB

  • Sample

    240906-a57t2axapm

  • MD5

    abb37d2dfc116a7fc3560112d2a82060

  • SHA1

    cbaa967b9d98e9e86e0ec6c24953f4d89ed037db

  • SHA256

    5f162a4037467d243d86569359cea608fb4670db7e8171926843bef5e8feacdf

  • SHA512

    2079cbb9da2c45338c380db020c1fde65646e81f2dc4ea1f7dfe84743006fe1f92ca42876250aa884fd73bc7652d276f72118a0add5ef05260d5dc56ba0e50ae

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8IZTRVZTWn1++PJHJXA/OsIZfzc3/Q8I9:fnyiQSo7Z1QSo7ZD

Malware Config

Targets

    • Target

      abb37d2dfc116a7fc3560112d2a82060N.exe

    • Size

      139KB

    • MD5

      abb37d2dfc116a7fc3560112d2a82060

    • SHA1

      cbaa967b9d98e9e86e0ec6c24953f4d89ed037db

    • SHA256

      5f162a4037467d243d86569359cea608fb4670db7e8171926843bef5e8feacdf

    • SHA512

      2079cbb9da2c45338c380db020c1fde65646e81f2dc4ea1f7dfe84743006fe1f92ca42876250aa884fd73bc7652d276f72118a0add5ef05260d5dc56ba0e50ae

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8IZTRVZTWn1++PJHJXA/OsIZfzc3/Q8I9:fnyiQSo7Z1QSo7ZD

    • Renames multiple (2840) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks