Overview

overview

9

Static

static

7

b51a7566b5...0N.exe

windows7-x64

9

b51a7566b5...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    b51a7566b5d2098cdf2a3524a81ffc20N.exe

  • Size

    44KB

  • Sample

    240829-qpgwnstenf

  • MD5

    b51a7566b5d2098cdf2a3524a81ffc20

  • SHA1

    388bfb4cd5bbb6be9c7b255cda752cb1989c9b7a

  • SHA256

    6b41e8f07eff69ce9d036833b5de6d8f7edb3801e785a0c3bd0430027cc2731d

  • SHA512

    470b21a9b9d8f7421f9287039da45254edc122cb16ed802d0a1c3e78405c419ab49430626be93385dd67c4350430fab5b386a455ca19fab677b7bb7dd814f1d3

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9nGcjkK2rvVkuSE1NGc1NGv:CTW7JJ7T7jkKCVkuSyEKEv

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      b51a7566b5d2098cdf2a3524a81ffc20N.exe

    • Size

      44KB

    • MD5

      b51a7566b5d2098cdf2a3524a81ffc20

    • SHA1

      388bfb4cd5bbb6be9c7b255cda752cb1989c9b7a

    • SHA256

      6b41e8f07eff69ce9d036833b5de6d8f7edb3801e785a0c3bd0430027cc2731d

    • SHA512

      470b21a9b9d8f7421f9287039da45254edc122cb16ed802d0a1c3e78405c419ab49430626be93385dd67c4350430fab5b386a455ca19fab677b7bb7dd814f1d3

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9nGcjkK2rvVkuSE1NGc1NGv:CTW7JJ7T7jkKCVkuSyEKEv

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3207) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks