General

  • Target

    45b4a086f8612cbc50ff92801f92fe80N.exe

  • Size

    120KB

  • Sample

    240721-b8d7kavanr

  • MD5

    45b4a086f8612cbc50ff92801f92fe80

  • SHA1

    94b68255b5ff435d410c22f9fc8eeafae8184430

  • SHA256

    62616ff54c270060562733b421479819ab579ef295f0927fdc59cf4cf67409eb

  • SHA512

    83e6c7bffc8de9d4559409bc6f72174aeb4599d7394e92e951b91d30d6f1525428aceb1b3b6f1424a43dfef8b82e4b418c3dbb6b83ea94599da6e1fb6ad78ac0

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8IZbTWn1++PJHJXA/OsIZfzc3/Q8IZS:fnyiQSo7ZPQSo7ZS

Score
9/10

Malware Config

Targets

    • Target

      45b4a086f8612cbc50ff92801f92fe80N.exe

    • Size

      120KB

    • MD5

      45b4a086f8612cbc50ff92801f92fe80

    • SHA1

      94b68255b5ff435d410c22f9fc8eeafae8184430

    • SHA256

      62616ff54c270060562733b421479819ab579ef295f0927fdc59cf4cf67409eb

    • SHA512

      83e6c7bffc8de9d4559409bc6f72174aeb4599d7394e92e951b91d30d6f1525428aceb1b3b6f1424a43dfef8b82e4b418c3dbb6b83ea94599da6e1fb6ad78ac0

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8IZbTWn1++PJHJXA/OsIZfzc3/Q8IZS:fnyiQSo7ZPQSo7ZS

    Score
    9/10
    • Renames multiple (2921) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks