Overview

overview

9

Static

static

7

01382561a4...0N.exe

windows7-x64

9

01382561a4...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    01382561a42ff7fc65d101a3db022920N.exe

  • Size

    74KB

  • Sample

    240713-rwva1svbnj

  • MD5

    01382561a42ff7fc65d101a3db022920

  • SHA1

    0d964a835d2a27081e5e2e2657020f26f630de80

  • SHA256

    3d8032921cc9f6d52c795ea9388ae2c69e9901b9094b7f6b9020b5fc6a2ea329

  • SHA512

    bd256740b2085c9b94ea7d6a1c7c41dae4dce2069e83e78369bf1e1e8c8a6ca657daaf062b40cce0065b010d5547bc4d5dc9303e896ddc2743f762d606096be4

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q861T:fnyiQSoV1T

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      01382561a42ff7fc65d101a3db022920N.exe

    • Size

      74KB

    • MD5

      01382561a42ff7fc65d101a3db022920

    • SHA1

      0d964a835d2a27081e5e2e2657020f26f630de80

    • SHA256

      3d8032921cc9f6d52c795ea9388ae2c69e9901b9094b7f6b9020b5fc6a2ea329

    • SHA512

      bd256740b2085c9b94ea7d6a1c7c41dae4dce2069e83e78369bf1e1e8c8a6ca657daaf062b40cce0065b010d5547bc4d5dc9303e896ddc2743f762d606096be4

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q861T:fnyiQSoV1T

    Score
    9/10
    ransomwareupx

    • Renames multiple (3708) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks