General

  • Target

    59ee6d70673c814a184354844a941f13703630c14f8be4de0f5d6652beb1a718.exe

  • Size

    149KB

  • Sample

    250111-18nhnsvkfn

  • MD5

    f282dbad0e98e548a1f4c80cda1b421f

  • SHA1

    c84bd4af981648c70b98b3f68825446a7ba3a81c

  • SHA256

    59ee6d70673c814a184354844a941f13703630c14f8be4de0f5d6652beb1a718

  • SHA512

    9d05ff4ee54a1133c3b91a51ea358a165b5378650e044ddde5e54aa924878aa3c7fbfee0c85545f999c3984e98c367ad036a81a94bd68937861d61334866b322

  • SSDEEP

    1536:V7Zf/FAxTWoJJZENTBHfiP3zHQtMH7Zf/FAxTWoJJZENTBHfiP3zHQtMhf51:fny1tESQ8ny1tESQk1

Malware Config

Targets

    • Target

      59ee6d70673c814a184354844a941f13703630c14f8be4de0f5d6652beb1a718.exe

    • Size

      149KB

    • MD5

      f282dbad0e98e548a1f4c80cda1b421f

    • SHA1

      c84bd4af981648c70b98b3f68825446a7ba3a81c

    • SHA256

      59ee6d70673c814a184354844a941f13703630c14f8be4de0f5d6652beb1a718

    • SHA512

      9d05ff4ee54a1133c3b91a51ea358a165b5378650e044ddde5e54aa924878aa3c7fbfee0c85545f999c3984e98c367ad036a81a94bd68937861d61334866b322

    • SSDEEP

      1536:V7Zf/FAxTWoJJZENTBHfiP3zHQtMH7Zf/FAxTWoJJZENTBHfiP3zHQtMhf51:fny1tESQ8ny1tESQk1

    • Renames multiple (272) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks