General

  • Target

    367a433c3c0ed17b7bbbd8b9e58764f9a0ebcf599872153d1dd7fdfd1629566f.exe

  • Size

    115KB

  • Sample

    241119-ngs8mawcpj

  • MD5

    7745671250bce0a2eab978b0b1f0a212

  • SHA1

    b9455d11c8f1a5c22eae4ff944cf93bb548a96c0

  • SHA256

    367a433c3c0ed17b7bbbd8b9e58764f9a0ebcf599872153d1dd7fdfd1629566f

  • SHA512

    64544d1d9de8f57888cbc823fa55f77ff3de44e3648f4192044a237a0aa758693bc24d321badcc34c77d252814434fe1db1fbd241152343a5b80b64b8b01ecd0

  • SSDEEP

    3072:ht9iMGfUSaOy9SnJUwFU+FUhFUeFUXFUqyqKRrpF6Pwb:n9iMGsSaOyik

Malware Config

Targets

    • Target

      367a433c3c0ed17b7bbbd8b9e58764f9a0ebcf599872153d1dd7fdfd1629566f.exe

    • Size

      115KB

    • MD5

      7745671250bce0a2eab978b0b1f0a212

    • SHA1

      b9455d11c8f1a5c22eae4ff944cf93bb548a96c0

    • SHA256

      367a433c3c0ed17b7bbbd8b9e58764f9a0ebcf599872153d1dd7fdfd1629566f

    • SHA512

      64544d1d9de8f57888cbc823fa55f77ff3de44e3648f4192044a237a0aa758693bc24d321badcc34c77d252814434fe1db1fbd241152343a5b80b64b8b01ecd0

    • SSDEEP

      3072:ht9iMGfUSaOy9SnJUwFU+FUhFUeFUXFUqyqKRrpF6Pwb:n9iMGsSaOyik

    • Renames multiple (3438) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks