Overview

overview

9

Static

static

7

1929c1d78f...0N.exe

windows7-x64

9

1929c1d78f...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1929c1d78fb7bdd035d44233455fcfb0N.exe

  • Size

    70KB

  • Sample

    240805-2jm2aavbla

  • MD5

    1929c1d78fb7bdd035d44233455fcfb0

  • SHA1

    1cd2878c4a9e3732294d4a6dd515f40031968ecb

  • SHA256

    49e44000da021b5bb13531d8f3b6ef4b95799aedf81dafbefd75282b67d26560

  • SHA512

    49a7a264d8cdfca69859d0d9669bea9a9bab578c094bdeb545074c4a6a5ab020a7e1cab3cb7e8e3f0164475a31cf2810d3550c5e1d6926863a94045460d0518c

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8+g9VyjVyN:fnyiQSoi

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      1929c1d78fb7bdd035d44233455fcfb0N.exe

    • Size

      70KB

    • MD5

      1929c1d78fb7bdd035d44233455fcfb0

    • SHA1

      1cd2878c4a9e3732294d4a6dd515f40031968ecb

    • SHA256

      49e44000da021b5bb13531d8f3b6ef4b95799aedf81dafbefd75282b67d26560

    • SHA512

      49a7a264d8cdfca69859d0d9669bea9a9bab578c094bdeb545074c4a6a5ab020a7e1cab3cb7e8e3f0164475a31cf2810d3550c5e1d6926863a94045460d0518c

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8+g9VyjVyN:fnyiQSoi

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3100) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks