Overview

overview

9

Static

static

7

5eb9ea2f17...0N.exe

windows7-x64

9

5eb9ea2f17...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    5eb9ea2f179504e7391bc2f0d3abb1b0N.exe

  • Size

    40KB

  • Sample

    240724-hx5zgatenq

  • MD5

    5eb9ea2f179504e7391bc2f0d3abb1b0

  • SHA1

    9cecebb64edda8fafdf7c3814f7840de9b34ff4d

  • SHA256

    e01f700a68aeb854233f9ade791f4dfed3f64efcc23d22f06608952e7f42953d

  • SHA512

    c515da73927528ac9a746efd25f1ee509c0666aa1e06358615530a85196dd126ccbbbc13222bfc25e9e2800f27cda3f0e2f24d03760e80b21ec83c5346956b03

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJXGiXZJ:V7Zf/FAxTWoJJX/

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      5eb9ea2f179504e7391bc2f0d3abb1b0N.exe

    • Size

      40KB

    • MD5

      5eb9ea2f179504e7391bc2f0d3abb1b0

    • SHA1

      9cecebb64edda8fafdf7c3814f7840de9b34ff4d

    • SHA256

      e01f700a68aeb854233f9ade791f4dfed3f64efcc23d22f06608952e7f42953d

    • SHA512

      c515da73927528ac9a746efd25f1ee509c0666aa1e06358615530a85196dd126ccbbbc13222bfc25e9e2800f27cda3f0e2f24d03760e80b21ec83c5346956b03

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJXGiXZJ:V7Zf/FAxTWoJJX/

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (2890) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks