General

  • Target

    db5cb45a2b6be0bd4d96d2206038cdf9caae01b23b126b7c892cb3bb10c4c117.exe

  • Size

    59KB

  • Sample

    241119-pcy4ra1jfl

  • MD5

    a70296bf1ebaaa8be472e563cad4d023

  • SHA1

    5d2164d27d706ab2fe3adc0569bd0c8548a0d67d

  • SHA256

    db5cb45a2b6be0bd4d96d2206038cdf9caae01b23b126b7c892cb3bb10c4c117

  • SHA512

    5f7f8b409749b4c2e040975ba2b045a1ac5d8318f9a4d3218acaaa38eed42e3276aef90c94f81a94e63a24f47866a69b1b57e538ea97eaf8f44d86f4ca9cee41

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATBHfBo8o3PV15Ri:V7Zf/FAxTWoJJZENTBHfiP3zIJKaJKM

Malware Config

Targets

    • Target

      db5cb45a2b6be0bd4d96d2206038cdf9caae01b23b126b7c892cb3bb10c4c117.exe

    • Size

      59KB

    • MD5

      a70296bf1ebaaa8be472e563cad4d023

    • SHA1

      5d2164d27d706ab2fe3adc0569bd0c8548a0d67d

    • SHA256

      db5cb45a2b6be0bd4d96d2206038cdf9caae01b23b126b7c892cb3bb10c4c117

    • SHA512

      5f7f8b409749b4c2e040975ba2b045a1ac5d8318f9a4d3218acaaa38eed42e3276aef90c94f81a94e63a24f47866a69b1b57e538ea97eaf8f44d86f4ca9cee41

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATBHfBo8o3PV15Ri:V7Zf/FAxTWoJJZENTBHfiP3zIJKaJKM

    • Renames multiple (3083) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks