General

  • Target

    f65135b4540dda206631725bda308cc0N.exe

  • Size

    70KB

  • Sample

    240906-wnkttszhkl

  • MD5

    f65135b4540dda206631725bda308cc0

  • SHA1

    3441ec2e0dfa845c56ebc75252722e0e9f9a0de1

  • SHA256

    2e5fc59b3eebfb08fc6e7df68b9b97f86e6d9fcad77c7ddb25d064ed3c141f67

  • SHA512

    8d5bae8e830c9905ca6cbce72f6825a6542bc2df79d6c0cabb6563759c8f4ecf63603d85e83d09189af2ccb0b122b7834ab809af36f21cdaaacd6dc6da33ae64

  • SSDEEP

    1536:V7Zf/FAxTWoJJTU3UytJfOKI+h/YI+h/BlSj3uAU:fny1sI+h/YI+h/Br

Malware Config

Targets

    • Target

      f65135b4540dda206631725bda308cc0N.exe

    • Size

      70KB

    • MD5

      f65135b4540dda206631725bda308cc0

    • SHA1

      3441ec2e0dfa845c56ebc75252722e0e9f9a0de1

    • SHA256

      2e5fc59b3eebfb08fc6e7df68b9b97f86e6d9fcad77c7ddb25d064ed3c141f67

    • SHA512

      8d5bae8e830c9905ca6cbce72f6825a6542bc2df79d6c0cabb6563759c8f4ecf63603d85e83d09189af2ccb0b122b7834ab809af36f21cdaaacd6dc6da33ae64

    • SSDEEP

      1536:V7Zf/FAxTWoJJTU3UytJfOKI+h/YI+h/BlSj3uAU:fny1sI+h/YI+h/Br

    • Renames multiple (3213) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks