Overview

overview

9

Static

static

7

f71e0c4b63...0N.exe

windows7-x64

9

f71e0c4b63...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    f71e0c4b63bac61bbeb998d0de8192d0N.exe

  • Size

    27KB

  • Sample

    240901-rp3c2stdpb

  • MD5

    f71e0c4b63bac61bbeb998d0de8192d0

  • SHA1

    f036791b95b1cd7a94d4c8f1f242f1329def3c83

  • SHA256

    e8fd1ddecac889f1ad094220ff71c39a145b5d8365bbcf9adfeb9b3a43ef3fdd

  • SHA512

    3e501c39b854946cf712de09ef2c207ad4bc5e2060a4cb8e7f8acd87bb60560a91eb07bfde2b3801a5207ab088be3a757c6cb5ed5a46c2259313332e20ddc951

  • SSDEEP

    384:QOlIBXDaU7CPKK0TIhfJJ1Evd5BvhzaM9mSIEvd5BvhzaM9mSsxmMxm9+9HxZAa/:kBT37CPKKdJJ1EXBwzEXBwdcMcI9Hx7

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      f71e0c4b63bac61bbeb998d0de8192d0N.exe

    • Size

      27KB

    • MD5

      f71e0c4b63bac61bbeb998d0de8192d0

    • SHA1

      f036791b95b1cd7a94d4c8f1f242f1329def3c83

    • SHA256

      e8fd1ddecac889f1ad094220ff71c39a145b5d8365bbcf9adfeb9b3a43ef3fdd

    • SHA512

      3e501c39b854946cf712de09ef2c207ad4bc5e2060a4cb8e7f8acd87bb60560a91eb07bfde2b3801a5207ab088be3a757c6cb5ed5a46c2259313332e20ddc951

    • SSDEEP

      384:QOlIBXDaU7CPKK0TIhfJJ1Evd5BvhzaM9mSIEvd5BvhzaM9mSsxmMxm9+9HxZAa/:kBT37CPKKdJJ1EXBwzEXBwdcMcI9Hx7

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (2843) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks