Overview

overview

9

Static

static

7

13e884229c...0N.exe

windows7-x64

9

13e884229c...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    13e884229c2a64288696c96e94051a10N.exe

  • Size

    44KB

  • Sample

    240726-qvkjravamb

  • MD5

    13e884229c2a64288696c96e94051a10

  • SHA1

    81d12c53f37d84d9c795961718d21d54f72c1934

  • SHA256

    11134518abfd741245b467a5839fd760e5d87226e8e8bec3a42853df56e4c5ff

  • SHA512

    9b2eaf83d7f367125de8698665fdadb51231ba9c9e847f5c0f16b172d447fc22ecdac3074c59fe04e9b89d95d38c186a8116fbd6573f3b9b3753b38c8eda5ace

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJTU3U2la3F53F5CcW:V7Zf/FAxTWoJJTU3URz5A

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      13e884229c2a64288696c96e94051a10N.exe

    • Size

      44KB

    • MD5

      13e884229c2a64288696c96e94051a10

    • SHA1

      81d12c53f37d84d9c795961718d21d54f72c1934

    • SHA256

      11134518abfd741245b467a5839fd760e5d87226e8e8bec3a42853df56e4c5ff

    • SHA512

      9b2eaf83d7f367125de8698665fdadb51231ba9c9e847f5c0f16b172d447fc22ecdac3074c59fe04e9b89d95d38c186a8116fbd6573f3b9b3753b38c8eda5ace

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJTU3U2la3F53F5CcW:V7Zf/FAxTWoJJTU3URz5A

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (2809) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks