General

  • Target

    c23bdbdeaa6d16a97bc5e84ad5d144009d988968cd285e26fc628b3a067ad1d1N.exe

  • Size

    58KB

  • Sample

    241119-tgwlmsxpfv

  • MD5

    c4fc9088115b4471a9fdf68a21400890

  • SHA1

    87a59baddf5ec1b8a702c85f4b4ab68b3da8ec9a

  • SHA256

    c23bdbdeaa6d16a97bc5e84ad5d144009d988968cd285e26fc628b3a067ad1d1

  • SHA512

    4b6b3cdc3b3086695c0503e7cf9cd820d0ea07f2f40cf886e7a1cbaa81942892e7ae6bdf8b31410f0d5d2767d96196908859b16bdf7758403f98b2a7311066f3

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATBHfBo8o3PV15Ra:V7Zf/FAxTWoJJZENTBHfiP3za

Malware Config

Targets

    • Target

      c23bdbdeaa6d16a97bc5e84ad5d144009d988968cd285e26fc628b3a067ad1d1N.exe

    • Size

      58KB

    • MD5

      c4fc9088115b4471a9fdf68a21400890

    • SHA1

      87a59baddf5ec1b8a702c85f4b4ab68b3da8ec9a

    • SHA256

      c23bdbdeaa6d16a97bc5e84ad5d144009d988968cd285e26fc628b3a067ad1d1

    • SHA512

      4b6b3cdc3b3086695c0503e7cf9cd820d0ea07f2f40cf886e7a1cbaa81942892e7ae6bdf8b31410f0d5d2767d96196908859b16bdf7758403f98b2a7311066f3

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATBHfBo8o3PV15Ra:V7Zf/FAxTWoJJZENTBHfiP3za

    • Renames multiple (2851) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks