Overview

overview

9

Static

static

7

d6fde8dcbd...0N.exe

windows7-x64

9

d6fde8dcbd...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    d6fde8dcbd7df787c9318a80bfb3c560N.exe

  • Size

    67KB

  • Sample

    240806-wwrx4swdkl

  • MD5

    d6fde8dcbd7df787c9318a80bfb3c560

  • SHA1

    e3a8283f148c2618ac2bd7a72abf54d3708cf646

  • SHA256

    1a148e926f2a7b24a8ff114e444417f2906096acb91b5b45f742beaff6c60d1a

  • SHA512

    f3c00f01a1bbd7f997f43c1557e3c238633c2976dec071d8a684ce1c63d357fbe878005202e19ab8a37fe573a3428040c50c32550475c438d751471e88929b0f

  • SSDEEP

    1536:CTWn1++PJHJXA/OsIZfzc3/Q8IZf2Xcqve5e:KQSo7Zf2Xn

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      d6fde8dcbd7df787c9318a80bfb3c560N.exe

    • Size

      67KB

    • MD5

      d6fde8dcbd7df787c9318a80bfb3c560

    • SHA1

      e3a8283f148c2618ac2bd7a72abf54d3708cf646

    • SHA256

      1a148e926f2a7b24a8ff114e444417f2906096acb91b5b45f742beaff6c60d1a

    • SHA512

      f3c00f01a1bbd7f997f43c1557e3c238633c2976dec071d8a684ce1c63d357fbe878005202e19ab8a37fe573a3428040c50c32550475c438d751471e88929b0f

    • SSDEEP

      1536:CTWn1++PJHJXA/OsIZfzc3/Q8IZf2Xcqve5e:KQSo7Zf2Xn

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3324) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks