Overview

overview

9

Static

static

7

1538965ea1...05.exe

windows7-x64

9

1538965ea1...05.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    1538965ea1785b228bb040211e4b04775a53b14d697a7db37d045238dcd1c505

  • Size

    64KB

  • Sample

    240828-xwt8xa1fpa

  • MD5

    8f9b97157434220d6fe0e738ea5d56e9

  • SHA1

    68e6a11bb4636f729df44f621219478f3fb59690

  • SHA256

    1538965ea1785b228bb040211e4b04775a53b14d697a7db37d045238dcd1c505

  • SHA512

    d778f61b4550997f6225d7d01215005409c4951d8cebd3b0ae67a18c9f3410a8a81da2909183930e614c3dcdc35f0bb68b4a9d65399cdf8c593ae4ce6fd148b4

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATBWvyBh85c54wyu:V7Zf/FAxTWoJJZENTBWv36uEp

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      1538965ea1785b228bb040211e4b04775a53b14d697a7db37d045238dcd1c505

    • Size

      64KB

    • MD5

      8f9b97157434220d6fe0e738ea5d56e9

    • SHA1

      68e6a11bb4636f729df44f621219478f3fb59690

    • SHA256

      1538965ea1785b228bb040211e4b04775a53b14d697a7db37d045238dcd1c505

    • SHA512

      d778f61b4550997f6225d7d01215005409c4951d8cebd3b0ae67a18c9f3410a8a81da2909183930e614c3dcdc35f0bb68b4a9d65399cdf8c593ae4ce6fd148b4

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATBWvyBh85c54wyu:V7Zf/FAxTWoJJZENTBWv36uEp

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3752) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks