General

  • Target

    014f1c13ae7593bfd3dc71c58c3cc2e273b7e00f24c7bf779698466af1ce87f1.exe

  • Size

    390KB

  • Sample

    250111-1ze5yatqbk

  • MD5

    9e286dce2fe2ed3c19581694ec1e80ff

  • SHA1

    f67813c183e2e553f3238651527ef70ab51c1a66

  • SHA256

    014f1c13ae7593bfd3dc71c58c3cc2e273b7e00f24c7bf779698466af1ce87f1

  • SHA512

    2ccf0339b74f32dd8f469378bb3e2cd14301a269e7cbd03587f87f0f0deec95d65268f5aa3106be91a7492cedb6e8505116d1843ce666aae561ac9816f660de1

  • SSDEEP

    6144:fEyyj2yAIJbIjNDv0bNXkbvLiP+Eyyj2yAIJbIjNDv0bNXkbvLiPtV2t0:PyAUbIZGNXkbvLpyAUbIZGNXkbvL4V2+

Malware Config

Targets

    • Target

      014f1c13ae7593bfd3dc71c58c3cc2e273b7e00f24c7bf779698466af1ce87f1.exe

    • Size

      390KB

    • MD5

      9e286dce2fe2ed3c19581694ec1e80ff

    • SHA1

      f67813c183e2e553f3238651527ef70ab51c1a66

    • SHA256

      014f1c13ae7593bfd3dc71c58c3cc2e273b7e00f24c7bf779698466af1ce87f1

    • SHA512

      2ccf0339b74f32dd8f469378bb3e2cd14301a269e7cbd03587f87f0f0deec95d65268f5aa3106be91a7492cedb6e8505116d1843ce666aae561ac9816f660de1

    • SSDEEP

      6144:fEyyj2yAIJbIjNDv0bNXkbvLiP+Eyyj2yAIJbIjNDv0bNXkbvLiPtV2t0:PyAUbIZGNXkbvLpyAUbIZGNXkbvL4V2+

    • Renames multiple (1571) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks