General

  • Target

    944398b65b47139b939574d48928d370N.exe

  • Size

    47KB

  • Sample

    240907-nng4yasdmf

  • MD5

    944398b65b47139b939574d48928d370

  • SHA1

    4742a87f7f449a19ab10a30954f4fe1fe428aafc

  • SHA256

    13140cffad688655be1b6bd3bfa07c2e28f449ccf9a9fb596c5772a50ae494fa

  • SHA512

    be821d604dd546d2c56f07dab52bd0c54257d921b5e512f74319f7a3c19f10772369acf9c89c32cac90fc51c08d9e600fbd1b947b6c1b5967bc67d9d453f0388

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9y:V7Zf/FAxTWoJJ7T4

Malware Config

Targets

    • Target

      944398b65b47139b939574d48928d370N.exe

    • Size

      47KB

    • MD5

      944398b65b47139b939574d48928d370

    • SHA1

      4742a87f7f449a19ab10a30954f4fe1fe428aafc

    • SHA256

      13140cffad688655be1b6bd3bfa07c2e28f449ccf9a9fb596c5772a50ae494fa

    • SHA512

      be821d604dd546d2c56f07dab52bd0c54257d921b5e512f74319f7a3c19f10772369acf9c89c32cac90fc51c08d9e600fbd1b947b6c1b5967bc67d9d453f0388

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9y:V7Zf/FAxTWoJJ7T4

    • Renames multiple (3150) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks