Overview

overview

9

Static

static

7

e8dbbfbf91...0N.exe

windows7-x64

9

e8dbbfbf91...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    e8dbbfbf9172a868a45d8b722f28db80N.exe

  • Size

    39KB

  • Sample

    240823-n4ptqavfkr

  • MD5

    e8dbbfbf9172a868a45d8b722f28db80

  • SHA1

    4992a9f980486fb8ada51300f5d46abe50e6c715

  • SHA256

    5ef64053ba8dc2e624358826e4629e70b7d0ad51ddfd368379eb60ca855445fc

  • SHA512

    feb996c3aaf039d76bd7746aaa6be0693aba5508f9047f14058ea83bebd3c10efb8a97da8937710128321b1aec557b21dea3c612ffab70fc2800a5e4e7814fb7

  • SSDEEP

    768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATNydWK9WKvhNYw05jYw053:CTW7JJZENTNyoKIKIwBwM

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      e8dbbfbf9172a868a45d8b722f28db80N.exe

    • Size

      39KB

    • MD5

      e8dbbfbf9172a868a45d8b722f28db80

    • SHA1

      4992a9f980486fb8ada51300f5d46abe50e6c715

    • SHA256

      5ef64053ba8dc2e624358826e4629e70b7d0ad51ddfd368379eb60ca855445fc

    • SHA512

      feb996c3aaf039d76bd7746aaa6be0693aba5508f9047f14058ea83bebd3c10efb8a97da8937710128321b1aec557b21dea3c612ffab70fc2800a5e4e7814fb7

    • SSDEEP

      768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATNydWK9WKvhNYw05jYw053:CTW7JJZENTNyoKIKIwBwM

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3392) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks