Overview

overview

9

Static

static

7

0cb638d366...0N.exe

windows7-x64

9

0cb638d366...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    0cb638d3662aba6677d3bd2833aa48d0N.exe

  • Size

    47KB

  • Sample

    240722-zxk3qsydnq

  • MD5

    0cb638d3662aba6677d3bd2833aa48d0

  • SHA1

    b878fa9aa866dea0201aeca5db11df3e8c04f17b

  • SHA256

    1df04e08588e2663a910b0b91779370e7963898e4b03b3da41bdd104071b3762

  • SHA512

    076efac3d63b5f1611d57a94c3f35781efdffaddf13b21a6e90349faa1d834713e8796067b74b057e5e207ba2db350b8cf14cb4b98aa60a4c611e5e10f3bf1f7

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcN1o:V7Zf/FAxTWoJJ7Tl

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      0cb638d3662aba6677d3bd2833aa48d0N.exe

    • Size

      47KB

    • MD5

      0cb638d3662aba6677d3bd2833aa48d0

    • SHA1

      b878fa9aa866dea0201aeca5db11df3e8c04f17b

    • SHA256

      1df04e08588e2663a910b0b91779370e7963898e4b03b3da41bdd104071b3762

    • SHA512

      076efac3d63b5f1611d57a94c3f35781efdffaddf13b21a6e90349faa1d834713e8796067b74b057e5e207ba2db350b8cf14cb4b98aa60a4c611e5e10f3bf1f7

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcN1o:V7Zf/FAxTWoJJ7Tl

    Score
    9/10
    ransomwareupx

    • Renames multiple (2907) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks