Overview

overview

9

Static

static

7

1c5fe4cabd...0N.exe

windows7-x64

9

1c5fe4cabd...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    1c5fe4cabd499d27add633b1764e4630N.exe

  • Size

    24KB

  • Sample

    240818-vm6t8sxelp

  • MD5

    1c5fe4cabd499d27add633b1764e4630

  • SHA1

    6179e599d55f06950b1d7b38478ad74b2a3f5d99

  • SHA256

    43f525b92cccb40e149d6e5b716796c752fa077495197040fff7112b52bef932

  • SHA512

    28099296f85545615f9875f126798028e0370f3b0e165cc2f627e031d94487ee2b504537f79d3a51d666caecf18f12585a856cf393a6e33cddb7de7a6371ab34

  • SSDEEP

    384:QOlIBXDaU7CPKK0TIhfJJ1Evd5BvhzaM9mSIEvd5BvhzaM9mSsxmMxm9+9WMcAMK:kBT37CPKKdJJ1EXBwzEXBwdcMcI99

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      1c5fe4cabd499d27add633b1764e4630N.exe

    • Size

      24KB

    • MD5

      1c5fe4cabd499d27add633b1764e4630

    • SHA1

      6179e599d55f06950b1d7b38478ad74b2a3f5d99

    • SHA256

      43f525b92cccb40e149d6e5b716796c752fa077495197040fff7112b52bef932

    • SHA512

      28099296f85545615f9875f126798028e0370f3b0e165cc2f627e031d94487ee2b504537f79d3a51d666caecf18f12585a856cf393a6e33cddb7de7a6371ab34

    • SSDEEP

      384:QOlIBXDaU7CPKK0TIhfJJ1Evd5BvhzaM9mSIEvd5BvhzaM9mSsxmMxm9+9WMcAMK:kBT37CPKKdJJ1EXBwzEXBwdcMcI99

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3458) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks