General

  • Target

    5894f5a046be818145b2d107b71609a0fe6726e1ebabebc44d645d88caac90da.exe

  • Size

    146KB

  • Sample

    241119-x3qjaswjbk

  • MD5

    c463642173cfd448636657c21e40859b

  • SHA1

    12e80bd51050a62847cb2857804fee992c470505

  • SHA256

    5894f5a046be818145b2d107b71609a0fe6726e1ebabebc44d645d88caac90da

  • SHA512

    2447e603925bc32728b7b8381296d90b8a97046642900a6e80ffe756a989db14e6940fa17272294fa609959c062682c9bb81ca36e327c38cebc61600d19b4784

  • SSDEEP

    3072:fny1tES0Sm3Ka9iMGfUSaOy9SnJUwFU+FUhFUeFUXFUqyqKRrpF6Pwb:KbEJSm3b9iMGsSaOyie

Malware Config

Targets

    • Target

      5894f5a046be818145b2d107b71609a0fe6726e1ebabebc44d645d88caac90da.exe

    • Size

      146KB

    • MD5

      c463642173cfd448636657c21e40859b

    • SHA1

      12e80bd51050a62847cb2857804fee992c470505

    • SHA256

      5894f5a046be818145b2d107b71609a0fe6726e1ebabebc44d645d88caac90da

    • SHA512

      2447e603925bc32728b7b8381296d90b8a97046642900a6e80ffe756a989db14e6940fa17272294fa609959c062682c9bb81ca36e327c38cebc61600d19b4784

    • SSDEEP

      3072:fny1tES0Sm3Ka9iMGfUSaOy9SnJUwFU+FUhFUeFUXFUqyqKRrpF6Pwb:KbEJSm3b9iMGsSaOyie

    • Renames multiple (2593) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks