General

  • Target

    a19c6dcc9a84c70291bcb27e8d6e9ba0N.exe

  • Size

    27KB

  • Sample

    240906-zghyfaxcpc

  • MD5

    a19c6dcc9a84c70291bcb27e8d6e9ba0

  • SHA1

    8760b9e656ca06330a1d906bcbe700aaf991637d

  • SHA256

    577bb853758a5303be374cffae020624873d3f162df6bec7e570dce61870a4c8

  • SHA512

    c7c83d372bd7730262eaf2fd790716c0eed313fe2526fb9ccbf99b1c2aeabc836304456f64976066c9810cd66f472d281dd0ffd60969c37f8ca2f99c10ab2024

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9bJSsJSB9M:CTW7JJ7TFJSsJSY

Malware Config

Targets

    • Target

      a19c6dcc9a84c70291bcb27e8d6e9ba0N.exe

    • Size

      27KB

    • MD5

      a19c6dcc9a84c70291bcb27e8d6e9ba0

    • SHA1

      8760b9e656ca06330a1d906bcbe700aaf991637d

    • SHA256

      577bb853758a5303be374cffae020624873d3f162df6bec7e570dce61870a4c8

    • SHA512

      c7c83d372bd7730262eaf2fd790716c0eed313fe2526fb9ccbf99b1c2aeabc836304456f64976066c9810cd66f472d281dd0ffd60969c37f8ca2f99c10ab2024

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9bJSsJSB9M:CTW7JJ7TFJSsJSY

    • Renames multiple (3313) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks