Overview

overview

9

Static

static

7

ec6bac424b...f0.exe

windows7-x64

9

ec6bac424b...f0.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ec6bac424b6f881860688884e4478216536f1720226f91f5f8a60403239759f0

  • Size

    37KB

  • Sample

    240829-fewxqsthqf

  • MD5

    36f5fe9bfe7e7032efe57e08a0b7637f

  • SHA1

    b5241e7bef7ee5c1d9a8cb387b3b22bc16729ec6

  • SHA256

    ec6bac424b6f881860688884e4478216536f1720226f91f5f8a60403239759f0

  • SHA512

    1872e1c53558bead122a43a0e40be3c88937c42973d983fb8b38d09ca78e43b7b45ede4194ce639547a542f915df3049ebc970ae70edd4ebef33bf1093666ace

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9NCQy5vhgCy5vhgw3N:CTW7JJ7Tugtgw3N

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      ec6bac424b6f881860688884e4478216536f1720226f91f5f8a60403239759f0

    • Size

      37KB

    • MD5

      36f5fe9bfe7e7032efe57e08a0b7637f

    • SHA1

      b5241e7bef7ee5c1d9a8cb387b3b22bc16729ec6

    • SHA256

      ec6bac424b6f881860688884e4478216536f1720226f91f5f8a60403239759f0

    • SHA512

      1872e1c53558bead122a43a0e40be3c88937c42973d983fb8b38d09ca78e43b7b45ede4194ce639547a542f915df3049ebc970ae70edd4ebef33bf1093666ace

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9NCQy5vhgCy5vhgw3N:CTW7JJ7Tugtgw3N

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (4000) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks