General

  • Target

    e5702cae75c3f203e80486ec3e13aa8adf3e2e26faaebd0d6b5d6fe6161a1d55N.exe

  • Size

    36KB

  • Sample

    241119-xl19gazmfw

  • MD5

    7f3455798c404d8e8417ebc390894700

  • SHA1

    8d32f9b88fb9ce870c29fa33bb7af0ad47343027

  • SHA256

    e5702cae75c3f203e80486ec3e13aa8adf3e2e26faaebd0d6b5d6fe6161a1d55

  • SHA512

    fe91ecf2757db35433568ad431cad093f82b4470189852baa3dacaaf222bc5ee468e88ed9e3cb53c4807b7e2ac517b96a8b54abf468e3bee06b721ffc87a58f4

  • SSDEEP

    768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATBHfBo8o3PV15R5IT0Th:CTW7JJZENTBHfiP3zT

Malware Config

Targets

    • Target

      e5702cae75c3f203e80486ec3e13aa8adf3e2e26faaebd0d6b5d6fe6161a1d55N.exe

    • Size

      36KB

    • MD5

      7f3455798c404d8e8417ebc390894700

    • SHA1

      8d32f9b88fb9ce870c29fa33bb7af0ad47343027

    • SHA256

      e5702cae75c3f203e80486ec3e13aa8adf3e2e26faaebd0d6b5d6fe6161a1d55

    • SHA512

      fe91ecf2757db35433568ad431cad093f82b4470189852baa3dacaaf222bc5ee468e88ed9e3cb53c4807b7e2ac517b96a8b54abf468e3bee06b721ffc87a58f4

    • SSDEEP

      768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATBHfBo8o3PV15R5IT0Th:CTW7JJZENTBHfiP3zT

    • Renames multiple (2887) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks