Overview

overview

9

Static

static

7

3969f6c385...3e.exe

windows7-x64

9

3969f6c385...3e.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    3969f6c3851a8b9e1ef40c17fa63f56ec2d7dfaa60f78d3f3071f582d7ec633e.exe

  • Size

    82KB

  • Sample

    240704-eamylavcna

  • MD5

    49462ef5e23478f03b40eb03606766c0

  • SHA1

    40b65e1f3b4cf6bc0abe08f7e7b1e54122f0dfc0

  • SHA256

    3969f6c3851a8b9e1ef40c17fa63f56ec2d7dfaa60f78d3f3071f582d7ec633e

  • SHA512

    72396044d3969e07fa17bebb1204df428e9683fb6d544cb4bb6c99b980f34be4519c37fecc35072d869f91496c9fabfbd8efe9bf2bfb23e3b7d895e192666acc

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8/kJOM2kJOMS:fnyiQSo0dR

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      3969f6c3851a8b9e1ef40c17fa63f56ec2d7dfaa60f78d3f3071f582d7ec633e.exe

    • Size

      82KB

    • MD5

      49462ef5e23478f03b40eb03606766c0

    • SHA1

      40b65e1f3b4cf6bc0abe08f7e7b1e54122f0dfc0

    • SHA256

      3969f6c3851a8b9e1ef40c17fa63f56ec2d7dfaa60f78d3f3071f582d7ec633e

    • SHA512

      72396044d3969e07fa17bebb1204df428e9683fb6d544cb4bb6c99b980f34be4519c37fecc35072d869f91496c9fabfbd8efe9bf2bfb23e3b7d895e192666acc

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8/kJOM2kJOMS:fnyiQSo0dR

    Score
    9/10
    ransomwareupx

    • Renames multiple (530) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks