Overview

overview

9

Static

static

7

6faf0f1526...0N.exe

windows7-x64

9

6faf0f1526...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6faf0f15260426c62c8282ed29693d20N.exe

  • Size

    32KB

  • Sample

    240901-kvm2zsxape

  • MD5

    6faf0f15260426c62c8282ed29693d20

  • SHA1

    44f0d5cc4db802a123638da33fca85cdadea8571

  • SHA256

    ebc5ac6a1e18f5e095ebe442f9d5237cd81c9826e4b71140d33b4e2fc9b1eb56

  • SHA512

    eb9383ec17d4105c145cb73fb4cfbaebe16ea2ac62ad1b9e5b2a33e03eb62c92d0c067eba98c3b993168b8bde021b781f722d9d478f1f5cc6020cf23641b5d44

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9wlTK8WKnFIMK8WKnFI7:CTW7JJ7T4KNKnF3KNKnFy

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      6faf0f15260426c62c8282ed29693d20N.exe

    • Size

      32KB

    • MD5

      6faf0f15260426c62c8282ed29693d20

    • SHA1

      44f0d5cc4db802a123638da33fca85cdadea8571

    • SHA256

      ebc5ac6a1e18f5e095ebe442f9d5237cd81c9826e4b71140d33b4e2fc9b1eb56

    • SHA512

      eb9383ec17d4105c145cb73fb4cfbaebe16ea2ac62ad1b9e5b2a33e03eb62c92d0c067eba98c3b993168b8bde021b781f722d9d478f1f5cc6020cf23641b5d44

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9wlTK8WKnFIMK8WKnFI7:CTW7JJ7T4KNKnF3KNKnFy

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3439) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks