General

  • Target

    7d3b2f7e6d3931363f6cabded2e733a0N.exe

  • Size

    87KB

  • Sample

    240907-frkegawejp

  • MD5

    7d3b2f7e6d3931363f6cabded2e733a0

  • SHA1

    7a249eb366f509ab5b63ad3d7fe3db143a20ccf8

  • SHA256

    1951ec946683e02ae2af622ab8f99d2284c253c8d112dd2be6df3699fb553239

  • SHA512

    118f084530be4f9bb17167bb536567bbb8160de020742b1de65ea189cccae1d485e6894f91f060b729ad4dd6b3fc9ada18c01407286ae59cb5eb84559f61227a

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxY5p:fnyiQSox5p

Malware Config

Targets

    • Target

      7d3b2f7e6d3931363f6cabded2e733a0N.exe

    • Size

      87KB

    • MD5

      7d3b2f7e6d3931363f6cabded2e733a0

    • SHA1

      7a249eb366f509ab5b63ad3d7fe3db143a20ccf8

    • SHA256

      1951ec946683e02ae2af622ab8f99d2284c253c8d112dd2be6df3699fb553239

    • SHA512

      118f084530be4f9bb17167bb536567bbb8160de020742b1de65ea189cccae1d485e6894f91f060b729ad4dd6b3fc9ada18c01407286ae59cb5eb84559f61227a

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxY5p:fnyiQSox5p

    • Renames multiple (2943) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks