Overview

overview

9

Static

static

7

bc96301bee...0N.exe

windows7-x64

9

bc96301bee...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    bc96301bee7c13bbc4dba4cfc5763dc0N.exe

  • Size

    24KB

  • Sample

    240817-ffysqaxhpb

  • MD5

    bc96301bee7c13bbc4dba4cfc5763dc0

  • SHA1

    977a85cefd1e00f4c7ffe546726da2d87408fa0a

  • SHA256

    29b0907d51e77ed4a1889c32e0f9b036534972c54be4be0c991ca308004ca0f9

  • SHA512

    ec82a63e350ad4ead9f3547a56546d8c805e58362cdda0a0237dc2dc6ff01dcf6e726b4db86af0aa8fc8c9196d57d424d121362093ca62c26204955f5c43d990

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9dPdPr:CTW7JJ7TfFj

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      bc96301bee7c13bbc4dba4cfc5763dc0N.exe

    • Size

      24KB

    • MD5

      bc96301bee7c13bbc4dba4cfc5763dc0

    • SHA1

      977a85cefd1e00f4c7ffe546726da2d87408fa0a

    • SHA256

      29b0907d51e77ed4a1889c32e0f9b036534972c54be4be0c991ca308004ca0f9

    • SHA512

      ec82a63e350ad4ead9f3547a56546d8c805e58362cdda0a0237dc2dc6ff01dcf6e726b4db86af0aa8fc8c9196d57d424d121362093ca62c26204955f5c43d990

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9dPdPr:CTW7JJ7TfFj

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3267) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks