General

  • Target

    d9232cbf888c2d520f5b3c190fa25a70N.exe

  • Size

    54KB

  • Sample

    240913-k3v3kavgmp

  • MD5

    d9232cbf888c2d520f5b3c190fa25a70

  • SHA1

    14d9ab20b967885ada0e7a665267bf5291052849

  • SHA256

    bc5000b62d465ee58f0e21a7d07eb0201202488075756a8ad93f941541393097

  • SHA512

    dcf03375caf4247476531a67bc6087dc91a7dd619dcbb69f9620b930e887159d16b8947c2904d5b53b0143ccbfc9331911a80231a5dc455d7f801560e353427d

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjSEXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rs:V7Zf/FAxTWO

Malware Config

Targets

    • Target

      d9232cbf888c2d520f5b3c190fa25a70N.exe

    • Size

      54KB

    • MD5

      d9232cbf888c2d520f5b3c190fa25a70

    • SHA1

      14d9ab20b967885ada0e7a665267bf5291052849

    • SHA256

      bc5000b62d465ee58f0e21a7d07eb0201202488075756a8ad93f941541393097

    • SHA512

      dcf03375caf4247476531a67bc6087dc91a7dd619dcbb69f9620b930e887159d16b8947c2904d5b53b0143ccbfc9331911a80231a5dc455d7f801560e353427d

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjSEXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rs:V7Zf/FAxTWO

    • Renames multiple (3135) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks