General

  • Target

    ea4770717c557a26232a28ebb14f60d67a383243362155ff1f2a7bf87e75c2cd.exe

  • Size

    55KB

  • Sample

    241120-efkqesznhy

  • MD5

    b21d3945bcb469d055525480dceb73ea

  • SHA1

    be2d5fb36b24f7b4ff749942a6178c8d8f47db1d

  • SHA256

    ea4770717c557a26232a28ebb14f60d67a383243362155ff1f2a7bf87e75c2cd

  • SHA512

    b49ff522c713fa2129abf6490de1856efe9966fd005eefbe05dafb0284241d0a45482526680c35abc960baa997f594a84d2852a9d038df4c015e7eff86c948a5

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9l2pqp9:V7Zf/FAxTWoJJ7Tgw9

Malware Config

Targets

    • Target

      ea4770717c557a26232a28ebb14f60d67a383243362155ff1f2a7bf87e75c2cd.exe

    • Size

      55KB

    • MD5

      b21d3945bcb469d055525480dceb73ea

    • SHA1

      be2d5fb36b24f7b4ff749942a6178c8d8f47db1d

    • SHA256

      ea4770717c557a26232a28ebb14f60d67a383243362155ff1f2a7bf87e75c2cd

    • SHA512

      b49ff522c713fa2129abf6490de1856efe9966fd005eefbe05dafb0284241d0a45482526680c35abc960baa997f594a84d2852a9d038df4c015e7eff86c948a5

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9l2pqp9:V7Zf/FAxTWoJJ7Tgw9

    • Renames multiple (2588) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks