Overview

overview

9

Static

static

7

cfed30e33c...0N.exe

windows7-x64

9

cfed30e33c...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    cfed30e33ca6994b17ec42fc2f605750N.exe

  • Size

    139KB

  • Sample

    240821-am8cva1bmd

  • MD5

    cfed30e33ca6994b17ec42fc2f605750

  • SHA1

    0ba0a72ff1444f4ed288d3bd2edb0ed3a0dd83bf

  • SHA256

    451f5f8814e634e748f49678e221b7c7cdc0b539e4613a547ff0dee4375f0895

  • SHA512

    e302b804a06fa816ae9115b7ef93214451a2b12d9a48468c12c849ac6b7d6d9fd28c3b59c504fbd3ae10f8df8b8e7e00ce2bbd7c66704f8e27bea1fa566fad68

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxY5eTWn1++PJHJXA/OsIZfzc3/Q8zxo:fnyiQSox5+QSox5d

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      cfed30e33ca6994b17ec42fc2f605750N.exe

    • Size

      139KB

    • MD5

      cfed30e33ca6994b17ec42fc2f605750

    • SHA1

      0ba0a72ff1444f4ed288d3bd2edb0ed3a0dd83bf

    • SHA256

      451f5f8814e634e748f49678e221b7c7cdc0b539e4613a547ff0dee4375f0895

    • SHA512

      e302b804a06fa816ae9115b7ef93214451a2b12d9a48468c12c849ac6b7d6d9fd28c3b59c504fbd3ae10f8df8b8e7e00ce2bbd7c66704f8e27bea1fa566fad68

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxY5eTWn1++PJHJXA/OsIZfzc3/Q8zxo:fnyiQSox5+QSox5d

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (2837) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks