Overview

overview

9

Static

static

7

d8d4c22422...0N.exe

windows7-x64

9

d8d4c22422...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    d8d4c224228b1ca5a63b2e3ab1cc1d00N.exe

  • Size

    29KB

  • Sample

    240725-rvjswswgpg

  • MD5

    d8d4c224228b1ca5a63b2e3ab1cc1d00

  • SHA1

    d34db1f0d2e54eb5dad7c1272dae338fa405e368

  • SHA256

    216585f9bb340114ad36188391aa0b6a8bff61ad55827f95a8806346439bc917

  • SHA512

    0f4b98a2df4e85a7167ca565e9bf7b0763fa65968963e18743f585ba4c31e1fa36f6eda9b2fecc33679df80869b653fbeab64e377d3240bbb515b76df2b31c99

  • SSDEEP

    768:kBT37CPKK1EXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rcu90TKe+0TKek:CTWS

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      d8d4c224228b1ca5a63b2e3ab1cc1d00N.exe

    • Size

      29KB

    • MD5

      d8d4c224228b1ca5a63b2e3ab1cc1d00

    • SHA1

      d34db1f0d2e54eb5dad7c1272dae338fa405e368

    • SHA256

      216585f9bb340114ad36188391aa0b6a8bff61ad55827f95a8806346439bc917

    • SHA512

      0f4b98a2df4e85a7167ca565e9bf7b0763fa65968963e18743f585ba4c31e1fa36f6eda9b2fecc33679df80869b653fbeab64e377d3240bbb515b76df2b31c99

    • SSDEEP

      768:kBT37CPKK1EXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rcu90TKe+0TKek:CTWS

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3246) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks