Overview

overview

9

Static

static

7

f1bb6cccee...0N.exe

windows7-x64

9

f1bb6cccee...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    f1bb6cccee7af7bd69614de841f94190N.exe

  • Size

    49KB

  • Sample

    240725-yr82yavdmd

  • MD5

    f1bb6cccee7af7bd69614de841f94190

  • SHA1

    60e1d9cf4cf00888281e1be7a49cefd166a446bd

  • SHA256

    0916ddc876bad2dd9e81adf98cb453b58d0f518a8b4d6832dbc0e0d544cd5b2e

  • SHA512

    e14a512f75c355cc5c259b54438c5b7faba60a3136bbc527f807d1076c07e6edbaccc4355eb553705add9cbc2a392128326723d5dc28c1aa712e94c63181d4b4

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATNyHF/MF/VgnL:V7Zf/FAxTWoJJZENTNyl2inL

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      f1bb6cccee7af7bd69614de841f94190N.exe

    • Size

      49KB

    • MD5

      f1bb6cccee7af7bd69614de841f94190

    • SHA1

      60e1d9cf4cf00888281e1be7a49cefd166a446bd

    • SHA256

      0916ddc876bad2dd9e81adf98cb453b58d0f518a8b4d6832dbc0e0d544cd5b2e

    • SHA512

      e14a512f75c355cc5c259b54438c5b7faba60a3136bbc527f807d1076c07e6edbaccc4355eb553705add9cbc2a392128326723d5dc28c1aa712e94c63181d4b4

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATNyHF/MF/VgnL:V7Zf/FAxTWoJJZENTNyl2inL

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3138) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks