Overview

overview

9

Static

static

7

564df23465...3e.exe

windows7-x64

9

564df23465...3e.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    564df23465fe7da4260bbcd46ac53ebe3e278e398f36ca27fd4755dfc232613e

  • Size

    27KB

  • Sample

    240817-2ddkna1bkg

  • MD5

    2f4943580b8d24b711279907d392ceae

  • SHA1

    b99f924c2fdbef12647b98edf29ac546b2d713e9

  • SHA256

    564df23465fe7da4260bbcd46ac53ebe3e278e398f36ca27fd4755dfc232613e

  • SHA512

    7f99dcd18803927d8d3581e88f32a4b88b1ce348b5c3ae3a5a74f67cc51c742f85aa9fb9f8ce967564c6483b4f069361328a0c3d6f207a91492942e108afff43

  • SSDEEP

    384:QOlIBXDaU7CPKK0TIhfJJ1Evd5BvhzaM9mSIEvd5BvhzaM9mSsxmMxm9+93abk:kBT37CPKKdJJ1EXBwzEXBwdcMcI93abk

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      564df23465fe7da4260bbcd46ac53ebe3e278e398f36ca27fd4755dfc232613e

    • Size

      27KB

    • MD5

      2f4943580b8d24b711279907d392ceae

    • SHA1

      b99f924c2fdbef12647b98edf29ac546b2d713e9

    • SHA256

      564df23465fe7da4260bbcd46ac53ebe3e278e398f36ca27fd4755dfc232613e

    • SHA512

      7f99dcd18803927d8d3581e88f32a4b88b1ce348b5c3ae3a5a74f67cc51c742f85aa9fb9f8ce967564c6483b4f069361328a0c3d6f207a91492942e108afff43

    • SSDEEP

      384:QOlIBXDaU7CPKK0TIhfJJ1Evd5BvhzaM9mSIEvd5BvhzaM9mSsxmMxm9+93abk:kBT37CPKKdJJ1EXBwzEXBwdcMcI93abk

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3882) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks