General

  • Target
    setup.exe
  • Size 552KB
  • Sample261102-w2mwcaew3q
  • SHA256 b480e706cf532c5dd00354ba0feac70ad1d784dddffc14d6dbc636bf94a0a423
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      setup.exe
    • Size 552KB
    • SHA256 b480e706cf532c5dd00354ba0feac70ad1d784dddffc14d6dbc636bf94a0a423
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Renames multiple (596) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Downloads MZ/PE file

    • Mark of the Web detected: This indicates that the page was originally saved or cloned.

    • Network Share Discovery

      Attempt to gather information on host network.

MITRE ATT&CK Enterprise v16

Tasks