General

  • Target

    753a188083397ea419829e74340d8370N.exe

  • Size

    66KB

  • Sample

    240906-tqkwhawbjl

  • MD5

    753a188083397ea419829e74340d8370

  • SHA1

    ca7808311db753ce7e8e0a47415148d5c1d65b74

  • SHA256

    45c9960833c48c774435661361eebce55942643028220b0db93ecbec65f134ac

  • SHA512

    4941d84df530c6b993ab87e8e59e185b513a9cbb41e2cd27363189e7c51292d4eebd5eecf7cf6feaff908b8dcabd8ae814d0ce3d0af3109a643115de36af640c

  • SSDEEP

    1536:CTWn1++PJHJXA/OsIZfzc3/Q8IZTkb/b9mdG3mdGT:KQSo7ZgrJ

Malware Config

Targets

    • Target

      753a188083397ea419829e74340d8370N.exe

    • Size

      66KB

    • MD5

      753a188083397ea419829e74340d8370

    • SHA1

      ca7808311db753ce7e8e0a47415148d5c1d65b74

    • SHA256

      45c9960833c48c774435661361eebce55942643028220b0db93ecbec65f134ac

    • SHA512

      4941d84df530c6b993ab87e8e59e185b513a9cbb41e2cd27363189e7c51292d4eebd5eecf7cf6feaff908b8dcabd8ae814d0ce3d0af3109a643115de36af640c

    • SSDEEP

      1536:CTWn1++PJHJXA/OsIZfzc3/Q8IZTkb/b9mdG3mdGT:KQSo7ZgrJ

    • Renames multiple (3228) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks