Overview

overview

9

Static

static

7

0297710605...0N.exe

windows7-x64

9

0297710605...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    0297710605ef57e08c15c52ee5214d30N.exe

  • Size

    92KB

  • Sample

    240829-nyc8qs1hrm

  • MD5

    0297710605ef57e08c15c52ee5214d30

  • SHA1

    1dee635eb62d0feeb0c07e70d876297363a8b805

  • SHA256

    d22761f01773c0f1637f865f48fee7065877884a8ba23dfb34671ec690e45ef0

  • SHA512

    4e87a06692c32592b5bb00d3cd7a8419177688929f170eff0931374a7ff2c6eb9e7f3fcc0c5facd85b2877fe6c55d5c820500662340e904fc5d706988ec453ab

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxSLxnAQanAQA:fnyiQSo5L9

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      0297710605ef57e08c15c52ee5214d30N.exe

    • Size

      92KB

    • MD5

      0297710605ef57e08c15c52ee5214d30

    • SHA1

      1dee635eb62d0feeb0c07e70d876297363a8b805

    • SHA256

      d22761f01773c0f1637f865f48fee7065877884a8ba23dfb34671ec690e45ef0

    • SHA512

      4e87a06692c32592b5bb00d3cd7a8419177688929f170eff0931374a7ff2c6eb9e7f3fcc0c5facd85b2877fe6c55d5c820500662340e904fc5d706988ec453ab

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxSLxnAQanAQA:fnyiQSo5L9

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (2950) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks