Overview

overview

9

Static

static

7

4a1e6280f5...0N.exe

windows7-x64

9

4a1e6280f5...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    4a1e6280f568a7091af37f890d8e3360N.exe

  • Size

    68KB

  • Sample

    240723-cf3vwssajq

  • MD5

    4a1e6280f568a7091af37f890d8e3360

  • SHA1

    e78f4e6a78339387e5660a020665910b1792bd13

  • SHA256

    1617c48903661d4036df342d527ebeb20fcba9c469a3900624bf2ce3535359fb

  • SHA512

    66e3974ce7b041a2dfd465820fcbc7a2a1083626514bd8277e5264177fbb34c51f919e7ba7738299be7d17d24347c1e39b8f3fb98f46625425011649fbe0cefa

  • SSDEEP

    1536:a7ZyqaFAxTWH1++PJHJXA/OsIZfzc3/Q8IZW1:enaypQSo7ZW1

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      4a1e6280f568a7091af37f890d8e3360N.exe

    • Size

      68KB

    • MD5

      4a1e6280f568a7091af37f890d8e3360

    • SHA1

      e78f4e6a78339387e5660a020665910b1792bd13

    • SHA256

      1617c48903661d4036df342d527ebeb20fcba9c469a3900624bf2ce3535359fb

    • SHA512

      66e3974ce7b041a2dfd465820fcbc7a2a1083626514bd8277e5264177fbb34c51f919e7ba7738299be7d17d24347c1e39b8f3fb98f46625425011649fbe0cefa

    • SSDEEP

      1536:a7ZyqaFAxTWH1++PJHJXA/OsIZfzc3/Q8IZW1:enaypQSo7ZW1

    Score
    9/10
    ransomwareupx

    • Renames multiple (3069) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks