Overview

overview

9

Static

static

7

bcad7d3f72...0N.exe

windows7-x64

9

bcad7d3f72...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bcad7d3f72a1620bddb3d88446aa5290N.exe

  • Size

    84KB

  • Sample

    240901-h4wdlsvgjg

  • MD5

    bcad7d3f72a1620bddb3d88446aa5290

  • SHA1

    4486acda01c06b388833beab28816684aa780094

  • SHA256

    5e81772520ed399b8f1e72be0d76d88340a1fe7fd376c9ebaa0f778948ead9a4

  • SHA512

    b35636bdb27d7048f49a33b639db2277f15bda83e55c0cbf938272eadd851198fcb0e71e03e1e179b7a184e02cc43a5f72dd6cac8b717eeabb70f2a23c8fdb07

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxY546TKJ:fnyiQSox52

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      bcad7d3f72a1620bddb3d88446aa5290N.exe

    • Size

      84KB

    • MD5

      bcad7d3f72a1620bddb3d88446aa5290

    • SHA1

      4486acda01c06b388833beab28816684aa780094

    • SHA256

      5e81772520ed399b8f1e72be0d76d88340a1fe7fd376c9ebaa0f778948ead9a4

    • SHA512

      b35636bdb27d7048f49a33b639db2277f15bda83e55c0cbf938272eadd851198fcb0e71e03e1e179b7a184e02cc43a5f72dd6cac8b717eeabb70f2a23c8fdb07

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxY546TKJ:fnyiQSox52

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (2870) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks