Overview

overview

9

Static

static

7

fd41602bd0...a5.exe

windows7-x64

9

fd41602bd0...a5.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    fd41602bd01f6bed493340c183206e2ce0aac7647343a36d5dc00191539ec5a5

  • Size

    81KB

  • Sample

    240901-gdcm5sshjk

  • MD5

    430bcdac37ab641700795a179cc63a0b

  • SHA1

    6dcd396c4a8bf9f9705493167b1a9c6cc1329d53

  • SHA256

    fd41602bd01f6bed493340c183206e2ce0aac7647343a36d5dc00191539ec5a5

  • SHA512

    44646704b1b16c669ce7e32826f7ba4c11e4c725f1e73014fd787f24803d2399b6f515412303f6ade7482544df17c080ea9a2533e43c1356ad1e413a73fe6a8d

  • SSDEEP

    1536:CTWn1++PJHJXA/OsIZfzc3/Q8IZT+StuSts52/:KQSo7Za+u+s52/

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      fd41602bd01f6bed493340c183206e2ce0aac7647343a36d5dc00191539ec5a5

    • Size

      81KB

    • MD5

      430bcdac37ab641700795a179cc63a0b

    • SHA1

      6dcd396c4a8bf9f9705493167b1a9c6cc1329d53

    • SHA256

      fd41602bd01f6bed493340c183206e2ce0aac7647343a36d5dc00191539ec5a5

    • SHA512

      44646704b1b16c669ce7e32826f7ba4c11e4c725f1e73014fd787f24803d2399b6f515412303f6ade7482544df17c080ea9a2533e43c1356ad1e413a73fe6a8d

    • SSDEEP

      1536:CTWn1++PJHJXA/OsIZfzc3/Q8IZT+StuSts52/:KQSo7Za+u+s52/

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3487) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks