Overview

overview

9

Static

static

7

34f73be196...3e.exe

windows7-x64

9

34f73be196...3e.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    34f73be19639141c2c8dbd80bea214adb38a51e95452a9dfd1a68c4c23393c3e

  • Size

    56KB

  • Sample

    240817-zh4arsydnr

  • MD5

    9d9ba2872190164b191a8783a8f83345

  • SHA1

    706c5346ba7400f21ee19e1ec5c5bb64125e2c7b

  • SHA256

    34f73be19639141c2c8dbd80bea214adb38a51e95452a9dfd1a68c4c23393c3e

  • SHA512

    6213205e1bae62320349c7d8d7bb471f47dfc1c213b688b9f7a023cf8c06c0f8a1d3e0ac96c0913766c32639e500b1a4868055193a4d04bdeb5c5d8240724cd3

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATNyHF/MF/6m0md+:V7Zf/FAxTWoJJZENTNyl2Sm0mPW9

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      34f73be19639141c2c8dbd80bea214adb38a51e95452a9dfd1a68c4c23393c3e

    • Size

      56KB

    • MD5

      9d9ba2872190164b191a8783a8f83345

    • SHA1

      706c5346ba7400f21ee19e1ec5c5bb64125e2c7b

    • SHA256

      34f73be19639141c2c8dbd80bea214adb38a51e95452a9dfd1a68c4c23393c3e

    • SHA512

      6213205e1bae62320349c7d8d7bb471f47dfc1c213b688b9f7a023cf8c06c0f8a1d3e0ac96c0913766c32639e500b1a4868055193a4d04bdeb5c5d8240724cd3

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATNyHF/MF/6m0md+:V7Zf/FAxTWoJJZENTNyl2Sm0mPW9

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3780) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks