General

  • Target

    3379186c99fed5e82c7ec72e5874e850N.exe

  • Size

    34KB

  • Sample

    240913-vgavlsycjc

  • MD5

    3379186c99fed5e82c7ec72e5874e850

  • SHA1

    f509a312fd259a815e77466234551a96de750040

  • SHA256

    80e0e93b9226487d3ccc56f70835f8d89b1992faf12cd8fa922ade32ae08c440

  • SHA512

    7230399415c46f1de6eedf827badf499eda18e8f0f60d6829cbffabf2bb081266e5e50f92d1f5f298a59035e7995c9955df9e7ea541a9d97575039da4c8f60e7

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9Ro+QOViJfo+QOViJUbabv+BSBmBCUK9+BSB7:CTW7JJ7TPUbMkPMkM

Malware Config

Targets

    • Target

      3379186c99fed5e82c7ec72e5874e850N.exe

    • Size

      34KB

    • MD5

      3379186c99fed5e82c7ec72e5874e850

    • SHA1

      f509a312fd259a815e77466234551a96de750040

    • SHA256

      80e0e93b9226487d3ccc56f70835f8d89b1992faf12cd8fa922ade32ae08c440

    • SHA512

      7230399415c46f1de6eedf827badf499eda18e8f0f60d6829cbffabf2bb081266e5e50f92d1f5f298a59035e7995c9955df9e7ea541a9d97575039da4c8f60e7

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9Ro+QOViJfo+QOViJUbabv+BSBmBCUK9+BSB7:CTW7JJ7TPUbMkPMkM

    • Renames multiple (3407) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks