Overview

overview

9

Static

static

7

6589ba51eb...0N.exe

windows7-x64

9

6589ba51eb...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6589ba51eba11dc292584ca6ab85bfa0N.exe

  • Size

    71KB

  • Sample

    240721-e1d4daweln

  • MD5

    6589ba51eba11dc292584ca6ab85bfa0

  • SHA1

    c95dfe77b73bff6424c3453c8b608f18df5a0297

  • SHA256

    cf71da7cff582efc534f3bb50af259bb8d84c9475977cb821419853cfb7f8a97

  • SHA512

    17658583265f6b68ed0f004adac2968c05bf186c423512ab2979edb1417fe1ae63c1559dd0b5cc419b50e2c9d8aaef667dea603c163f7fa05be720f1b790582a

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8wY0kvRkvk:fnyiQSodY0kvRkvk

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      6589ba51eba11dc292584ca6ab85bfa0N.exe

    • Size

      71KB

    • MD5

      6589ba51eba11dc292584ca6ab85bfa0

    • SHA1

      c95dfe77b73bff6424c3453c8b608f18df5a0297

    • SHA256

      cf71da7cff582efc534f3bb50af259bb8d84c9475977cb821419853cfb7f8a97

    • SHA512

      17658583265f6b68ed0f004adac2968c05bf186c423512ab2979edb1417fe1ae63c1559dd0b5cc419b50e2c9d8aaef667dea603c163f7fa05be720f1b790582a

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8wY0kvRkvk:fnyiQSodY0kvRkvk

    Score
    9/10
    ransomwareupx

    • Renames multiple (3109) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks