Overview

overview

9

Static

static

7

e406746a3b...0N.exe

windows7-x64

9

e406746a3b...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    e406746a3b83f48155b40d46d42d4680N.exe

  • Size

    28KB

  • Sample

    240901-fbqljs1hln

  • MD5

    e406746a3b83f48155b40d46d42d4680

  • SHA1

    14b106b9a40ef377cf64dfb00f9bcec872ec6948

  • SHA256

    aaf08e43f49b11113ea448a573562a640288fa6319aaa5820b3dac4ff939a2cb

  • SHA512

    83995260cc09cf2981ae19a3a6be5735f2d7319b8fa2b01133ac9d7c12f614ed6fb31c9da8c5c8e2135c1ebcd552c928ab680c857db08450335812d58735f59c

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcI92wzwX:CTW7JJ7T8wzwX

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      e406746a3b83f48155b40d46d42d4680N.exe

    • Size

      28KB

    • MD5

      e406746a3b83f48155b40d46d42d4680

    • SHA1

      14b106b9a40ef377cf64dfb00f9bcec872ec6948

    • SHA256

      aaf08e43f49b11113ea448a573562a640288fa6319aaa5820b3dac4ff939a2cb

    • SHA512

      83995260cc09cf2981ae19a3a6be5735f2d7319b8fa2b01133ac9d7c12f614ed6fb31c9da8c5c8e2135c1ebcd552c928ab680c857db08450335812d58735f59c

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcI92wzwX:CTW7JJ7T8wzwX

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3398) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks