Overview

overview

9

Static

static

7

a54e6f4ab0...0N.exe

windows7-x64

9

a54e6f4ab0...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    a54e6f4ab0be0b44a5fe8e14e5e00b80N.exe

  • Size

    60KB

  • Sample

    240901-f4ttnstake

  • MD5

    a54e6f4ab0be0b44a5fe8e14e5e00b80

  • SHA1

    8f2b8e43cbc049cf6c39aa6906e6083414783e11

  • SHA256

    66878e0ebcafbf416e6c667ca4c78dd231bd0c4f6380d1f47f016e69523be96d

  • SHA512

    f825d753a7a1efff228c916e928eae0db5e8fa43d27ced9028438a65dfff35a09f54605b6cfca9a986e10f10f9c987e0f40f27f358ed101ad325d8fee460c2f5

  • SSDEEP

    768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFzp:CTWn1++PJHJXA/OsIZfzc3/Q8zxY5W

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      a54e6f4ab0be0b44a5fe8e14e5e00b80N.exe

    • Size

      60KB

    • MD5

      a54e6f4ab0be0b44a5fe8e14e5e00b80

    • SHA1

      8f2b8e43cbc049cf6c39aa6906e6083414783e11

    • SHA256

      66878e0ebcafbf416e6c667ca4c78dd231bd0c4f6380d1f47f016e69523be96d

    • SHA512

      f825d753a7a1efff228c916e928eae0db5e8fa43d27ced9028438a65dfff35a09f54605b6cfca9a986e10f10f9c987e0f40f27f358ed101ad325d8fee460c2f5

    • SSDEEP

      768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFzp:CTWn1++PJHJXA/OsIZfzc3/Q8zxY5W

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3179) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks