Overview

overview

9

Static

static

7

ce13c9c8c4...0N.exe

windows7-x64

9

ce13c9c8c4...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ce13c9c8c409539b6752ad9b99dc9d70N.exe

  • Size

    51KB

  • Sample

    240715-nfwblawgmb

  • MD5

    ce13c9c8c409539b6752ad9b99dc9d70

  • SHA1

    21f6f799005273ac3a34366b2dc54cc3f32bc8ee

  • SHA256

    8bfd3f0d502800c0599fc1bbe2108249ea6548d414bc2c2f9dfe69179ddeffba

  • SHA512

    ae93a4c41a81bc5eda3abdb30965d4bc4211dc13ce1500369ee8b7b9952e9756f4dd64e9f2be1d2fd3a0306cd5ac15452a13c17e9001467f2bdc343c6e48b599

  • SSDEEP

    768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFz8:CTWn1++PJHJXA/OsIZfzc3/Q8zxy

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      ce13c9c8c409539b6752ad9b99dc9d70N.exe

    • Size

      51KB

    • MD5

      ce13c9c8c409539b6752ad9b99dc9d70

    • SHA1

      21f6f799005273ac3a34366b2dc54cc3f32bc8ee

    • SHA256

      8bfd3f0d502800c0599fc1bbe2108249ea6548d414bc2c2f9dfe69179ddeffba

    • SHA512

      ae93a4c41a81bc5eda3abdb30965d4bc4211dc13ce1500369ee8b7b9952e9756f4dd64e9f2be1d2fd3a0306cd5ac15452a13c17e9001467f2bdc343c6e48b599

    • SSDEEP

      768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFz8:CTWn1++PJHJXA/OsIZfzc3/Q8zxy

    Score
    9/10
    ransomwareupx

    • Renames multiple (2835) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks