Overview

overview

9

Static

static

7

a68a2b1f43...01.exe

windows7-x64

9

a68a2b1f43...01.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    a68a2b1f43e5019282e465294614433c78a1aa9244f460765c40b83a5f7de501

  • Size

    69KB

  • Sample

    240811-bbc81axcpl

  • MD5

    a16bf2b7e0c083d078c3580ba7ac0eb2

  • SHA1

    84f31f1cdf7ba83b508ac32ca314a1905bdf5fcf

  • SHA256

    a68a2b1f43e5019282e465294614433c78a1aa9244f460765c40b83a5f7de501

  • SHA512

    6c75a19597ef2aaf98cad8386ce50ea3392c95efebb9cf32dfd19b16f4f32774a8968dfb9845d51ea605bc910bdf735a83a42cf226e417b494436d11e8e9936a

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjSEXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rQ:V7Zf/FAxTWtnMdyGdy1Yv

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      a68a2b1f43e5019282e465294614433c78a1aa9244f460765c40b83a5f7de501

    • Size

      69KB

    • MD5

      a16bf2b7e0c083d078c3580ba7ac0eb2

    • SHA1

      84f31f1cdf7ba83b508ac32ca314a1905bdf5fcf

    • SHA256

      a68a2b1f43e5019282e465294614433c78a1aa9244f460765c40b83a5f7de501

    • SHA512

      6c75a19597ef2aaf98cad8386ce50ea3392c95efebb9cf32dfd19b16f4f32774a8968dfb9845d51ea605bc910bdf735a83a42cf226e417b494436d11e8e9936a

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjSEXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rQ:V7Zf/FAxTWtnMdyGdy1Yv

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3546) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks