Overview

overview

9

Static

static

7

a317ddf113...0N.exe

windows7-x64

9

a317ddf113...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    a317ddf1132cf14a0bb9b4ab0f102110N.exe

  • Size

    67KB

  • Sample

    240806-pf8glasglc

  • MD5

    a317ddf1132cf14a0bb9b4ab0f102110

  • SHA1

    46f921bf014156e66a4c7b2ddcfbd23b1fe4ec96

  • SHA256

    43b775a7fcc2755e93fdf833ef724b102b7760590198017e6e2149f90b636b1d

  • SHA512

    eb55d916dce937e36bf503ec7f3bc68b87909ac3b7760041a7a48c22008beeedd3d6beb9bff50413240067c3a576ade70da4f4633a70fe2c248979231a632a7f

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8+1:fnyiQSor

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      a317ddf1132cf14a0bb9b4ab0f102110N.exe

    • Size

      67KB

    • MD5

      a317ddf1132cf14a0bb9b4ab0f102110

    • SHA1

      46f921bf014156e66a4c7b2ddcfbd23b1fe4ec96

    • SHA256

      43b775a7fcc2755e93fdf833ef724b102b7760590198017e6e2149f90b636b1d

    • SHA512

      eb55d916dce937e36bf503ec7f3bc68b87909ac3b7760041a7a48c22008beeedd3d6beb9bff50413240067c3a576ade70da4f4633a70fe2c248979231a632a7f

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8+1:fnyiQSor

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3169) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks