Overview

overview

9

Static

static

7

def2f65448...89.exe

windows7-x64

9

def2f65448...89.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    def2f6544842b0681d7d9e0c8113bbf37930e49bc285c4ac23dd5a788b665789

  • Size

    61KB

  • Sample

    240811-dsk2aaserj

  • MD5

    d4dfde9d7cd93f7763e417f97f24b422

  • SHA1

    c28e952f2a5e80ea32a17719e1d69c093f7b43d2

  • SHA256

    def2f6544842b0681d7d9e0c8113bbf37930e49bc285c4ac23dd5a788b665789

  • SHA512

    d0c05785633b0fa9b380cbf4def98ac8393b75b20e2e9f35e1cc4fdcbbfa9054960196b8a280c914f32ba7fa2c599e1bbef74208c93d5602e8b498ab4e6228c7

  • SSDEEP

    1536:V7Zf/FAxTWoJJZENTNyl2Sm0mdnwNSB4QB4h:fny1tE42rnwNSB6

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      def2f6544842b0681d7d9e0c8113bbf37930e49bc285c4ac23dd5a788b665789

    • Size

      61KB

    • MD5

      d4dfde9d7cd93f7763e417f97f24b422

    • SHA1

      c28e952f2a5e80ea32a17719e1d69c093f7b43d2

    • SHA256

      def2f6544842b0681d7d9e0c8113bbf37930e49bc285c4ac23dd5a788b665789

    • SHA512

      d0c05785633b0fa9b380cbf4def98ac8393b75b20e2e9f35e1cc4fdcbbfa9054960196b8a280c914f32ba7fa2c599e1bbef74208c93d5602e8b498ab4e6228c7

    • SSDEEP

      1536:V7Zf/FAxTWoJJZENTNyl2Sm0mdnwNSB4QB4h:fny1tE42rnwNSB6

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3730) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks