Overview

overview

9

Static

static

7

d05872df29...57.exe

windows7-x64

9

d05872df29...57.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    d05872df299f490fb832fbf911e070acf6ecb633ace66a8635a14d473fef2157

  • Size

    59KB

  • Sample

    240726-d9dzasvapk

  • MD5

    3afab7fadffe9b7e8d5212f7dbc7d63d

  • SHA1

    73e5ba073192876132be57264c06ee56834e40d3

  • SHA256

    d05872df299f490fb832fbf911e070acf6ecb633ace66a8635a14d473fef2157

  • SHA512

    bcb71c9e2fb94b93e35f60647f0a162dab1317a022f0147efe42e0e834409516b411e2fbb60e61000df07c0a09d88cc64ca7b718a3a72f9a17e642da31560018

  • SSDEEP

    1536:CTWn1++PJHJXA/OsIZfzc3/Q8zx0Cq/8S/88:KQSop8i88

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      d05872df299f490fb832fbf911e070acf6ecb633ace66a8635a14d473fef2157

    • Size

      59KB

    • MD5

      3afab7fadffe9b7e8d5212f7dbc7d63d

    • SHA1

      73e5ba073192876132be57264c06ee56834e40d3

    • SHA256

      d05872df299f490fb832fbf911e070acf6ecb633ace66a8635a14d473fef2157

    • SHA512

      bcb71c9e2fb94b93e35f60647f0a162dab1317a022f0147efe42e0e834409516b411e2fbb60e61000df07c0a09d88cc64ca7b718a3a72f9a17e642da31560018

    • SSDEEP

      1536:CTWn1++PJHJXA/OsIZfzc3/Q8zx0Cq/8S/88:KQSop8i88

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3456) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks