Overview

overview

9

Static

static

7

c6b9dd41d6...0N.exe

windows7-x64

9

c6b9dd41d6...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c6b9dd41d62ab54b09b7e780daeac5a0N.exe

  • Size

    92KB

  • Sample

    240901-2qjbnstfpq

  • MD5

    c6b9dd41d62ab54b09b7e780daeac5a0

  • SHA1

    85aaf604dcd644341282bc480cf1338e98b3aa84

  • SHA256

    799045d430d4c4c3368bdeb38ad78ba5703f1099bad72b3086e1f1bb5954ed89

  • SHA512

    824ee1d8aef2a78ccc7a12363c3c6d2e96a3ba60338739e555bce558abd54f527994b4640c388adff21f1f9ed8cdcfd795442e87499e3d084c72b3bcb5536f36

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxSLz:fnyiQSo5Lz

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      c6b9dd41d62ab54b09b7e780daeac5a0N.exe

    • Size

      92KB

    • MD5

      c6b9dd41d62ab54b09b7e780daeac5a0

    • SHA1

      85aaf604dcd644341282bc480cf1338e98b3aa84

    • SHA256

      799045d430d4c4c3368bdeb38ad78ba5703f1099bad72b3086e1f1bb5954ed89

    • SHA512

      824ee1d8aef2a78ccc7a12363c3c6d2e96a3ba60338739e555bce558abd54f527994b4640c388adff21f1f9ed8cdcfd795442e87499e3d084c72b3bcb5536f36

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxSLz:fnyiQSo5Lz

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (2824) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks