General

  • Target

    02c01e6e0597d44f38235b51a79f0f51eb893a8e670c921ae47ecda340cd4747.exe

  • Size

    21KB

  • Sample

    241119-whpktsygrf

  • MD5

    0e3b38de37455c201370636eb9b378a1

  • SHA1

    2aea9ba70b3c5befe1913ab6d71095e490b25f99

  • SHA256

    02c01e6e0597d44f38235b51a79f0f51eb893a8e670c921ae47ecda340cd4747

  • SHA512

    348ecc1e5dc1ac89eaacaef34ea4d44cbf66642618a22a9d17daa78ff7b724a67c005c14fd0a1b2bf1297c7b6f8090679538da02750c9fea5909bc3285f3a6e5

  • SSDEEP

    384:QOlIBXDaU7CPKK0TIhfJJcbQbf1Oti1JGBQOOiQJhAT17JllgplgN:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJk

Malware Config

Targets

    • Target

      02c01e6e0597d44f38235b51a79f0f51eb893a8e670c921ae47ecda340cd4747.exe

    • Size

      21KB

    • MD5

      0e3b38de37455c201370636eb9b378a1

    • SHA1

      2aea9ba70b3c5befe1913ab6d71095e490b25f99

    • SHA256

      02c01e6e0597d44f38235b51a79f0f51eb893a8e670c921ae47ecda340cd4747

    • SHA512

      348ecc1e5dc1ac89eaacaef34ea4d44cbf66642618a22a9d17daa78ff7b724a67c005c14fd0a1b2bf1297c7b6f8090679538da02750c9fea5909bc3285f3a6e5

    • SSDEEP

      384:QOlIBXDaU7CPKK0TIhfJJcbQbf1Oti1JGBQOOiQJhAT17JllgplgN:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJk

    • Renames multiple (2845) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks