General

  • Target

    29e870507f65136b06f3609c86c396ffa7f0d1b4d5c9576140cf285c42bfdad6.exe

  • Size

    165KB

  • Sample

    250111-1bdl7ssphr

  • MD5

    de3e45ddc99ced0bf53edca442147648

  • SHA1

    545426c5bfa80d4156c86217528612632686b3d9

  • SHA256

    29e870507f65136b06f3609c86c396ffa7f0d1b4d5c9576140cf285c42bfdad6

  • SHA512

    cebbe25862e947ccf8f89cd69a9e0f36348ac36efb0aee8b59dcd360245dcf0368c024190fad7699c002963dac5289953e61ba3aab9219c934ac9182f9164262

  • SSDEEP

    1536:V7Zf/FAxTWoJJZENTBHfiP3zHLe4pWHlPEXZzjUq3th5f6utM5vLNinVmWvMu0bD:fny1tEULVWHIjN3tj6qnv0b2UrXkbvLu

Malware Config

Targets

    • Target

      29e870507f65136b06f3609c86c396ffa7f0d1b4d5c9576140cf285c42bfdad6.exe

    • Size

      165KB

    • MD5

      de3e45ddc99ced0bf53edca442147648

    • SHA1

      545426c5bfa80d4156c86217528612632686b3d9

    • SHA256

      29e870507f65136b06f3609c86c396ffa7f0d1b4d5c9576140cf285c42bfdad6

    • SHA512

      cebbe25862e947ccf8f89cd69a9e0f36348ac36efb0aee8b59dcd360245dcf0368c024190fad7699c002963dac5289953e61ba3aab9219c934ac9182f9164262

    • SSDEEP

      1536:V7Zf/FAxTWoJJZENTBHfiP3zHLe4pWHlPEXZzjUq3th5f6utM5vLNinVmWvMu0bD:fny1tEULVWHIjN3tj6qnv0b2UrXkbvLu

    • Renames multiple (2792) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks