Overview

overview

9

Static

static

7

2cbe61694d...0N.exe

windows7-x64

9

2cbe61694d...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2cbe61694dcccf735f394c50b8b56310N.exe

  • Size

    59KB

  • Sample

    240901-hyylsavblk

  • MD5

    2cbe61694dcccf735f394c50b8b56310

  • SHA1

    30098c1ab50d71ac6ef5823ec1080fd13a53f394

  • SHA256

    c25d4f07e9726daf371afa79c4282948961da777abe6071d8722e1f959b7802d

  • SHA512

    9d9f3ec1e235ef7377cab5a82087ce591b701661f485ad5bed37a99c4744a1c756313c174cf35230732e4e18fa8611a5ff09651bbe43e6abc0eb7e05d7f19d25

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJjtf8WUtf8WZCqCrY4YRnj:V7Zf/FAxTWoJJ2WjWZCqCG

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      2cbe61694dcccf735f394c50b8b56310N.exe

    • Size

      59KB

    • MD5

      2cbe61694dcccf735f394c50b8b56310

    • SHA1

      30098c1ab50d71ac6ef5823ec1080fd13a53f394

    • SHA256

      c25d4f07e9726daf371afa79c4282948961da777abe6071d8722e1f959b7802d

    • SHA512

      9d9f3ec1e235ef7377cab5a82087ce591b701661f485ad5bed37a99c4744a1c756313c174cf35230732e4e18fa8611a5ff09651bbe43e6abc0eb7e05d7f19d25

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJjtf8WUtf8WZCqCrY4YRnj:V7Zf/FAxTWoJJ2WjWZCqCG

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3376) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks