General

  • Target

    852a7927d2f4c520a131e729a78a7dd0N.exe

  • Size

    91KB

  • Sample

    240907-bedc6sxapb

  • MD5

    852a7927d2f4c520a131e729a78a7dd0

  • SHA1

    ba6ce7ccb67de44b81917873a69b9f8b404126ee

  • SHA256

    596244532a1c8da374cd652dfacb4c54b35a330907508567b89d87aa256854d0

  • SHA512

    f5d4e2d094bede6e4a35c72b8e723b64494f0ce6e28d2155e4a8c3f68ee7239387ddb783a50f16b8409e69d9b75a4970c06d028f4048d847fb360fd64b826dc3

  • SSDEEP

    1536:V7Zf/FAxTWoJJ7Tx4PN54PN2TW7JJ7Tx4PN54PNe:fny1EWXEWg

Malware Config

Targets

    • Target

      852a7927d2f4c520a131e729a78a7dd0N.exe

    • Size

      91KB

    • MD5

      852a7927d2f4c520a131e729a78a7dd0

    • SHA1

      ba6ce7ccb67de44b81917873a69b9f8b404126ee

    • SHA256

      596244532a1c8da374cd652dfacb4c54b35a330907508567b89d87aa256854d0

    • SHA512

      f5d4e2d094bede6e4a35c72b8e723b64494f0ce6e28d2155e4a8c3f68ee7239387ddb783a50f16b8409e69d9b75a4970c06d028f4048d847fb360fd64b826dc3

    • SSDEEP

      1536:V7Zf/FAxTWoJJ7Tx4PN54PN2TW7JJ7Tx4PN54PNe:fny1EWXEWg

    • Renames multiple (2814) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks