General

  • Target

    3f9ca96b94fac747c8171e3ec20bde10N.exe

  • Size

    48KB

  • Sample

    240909-txt3razflh

  • MD5

    3f9ca96b94fac747c8171e3ec20bde10

  • SHA1

    6b4ccb1351984d56002b808225f979f3dbbd8aa6

  • SHA256

    0c7f6d391fe11b69be43987d819776b822ff455a281c7124b02fdf535527d118

  • SHA512

    85576606b64035b0ab85017bf6f3c7ae2227be1b943592d33b65754208fd918ed767734209e2c64c20d0476f49513acbbea8c97dfd297bb66568e9119e70486e

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcwBcCBcw/tio/tit6V4bm:CTW7JJ7TTQoQtq

Malware Config

Targets

    • Target

      3f9ca96b94fac747c8171e3ec20bde10N.exe

    • Size

      48KB

    • MD5

      3f9ca96b94fac747c8171e3ec20bde10

    • SHA1

      6b4ccb1351984d56002b808225f979f3dbbd8aa6

    • SHA256

      0c7f6d391fe11b69be43987d819776b822ff455a281c7124b02fdf535527d118

    • SHA512

      85576606b64035b0ab85017bf6f3c7ae2227be1b943592d33b65754208fd918ed767734209e2c64c20d0476f49513acbbea8c97dfd297bb66568e9119e70486e

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcwBcCBcw/tio/tit6V4bm:CTW7JJ7TTQoQtq

    • Renames multiple (3266) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks