Overview

overview

9

Static

static

7

2391fac3f6...0N.exe

windows7-x64

9

2391fac3f6...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2391fac3f69472f20ba381e3d2769fa0N.exe

  • Size

    29KB

  • Sample

    240901-rw14katerd

  • MD5

    2391fac3f69472f20ba381e3d2769fa0

  • SHA1

    4651f8f3596315b273b6ceb8126efb8c83b88e52

  • SHA256

    373680dfbb1ede338a7d14827fb6bd0cbecc01099b5d88959e7e2f690e874aa4

  • SHA512

    e142e8f6611620b4ca19ca8dfa95d56ec55844ef1aafa9586aff894aa5f09e3b690ee85a0ab6bd050cf62ed74b0b8fc3baf069d558e586cdd9f132dc061034de

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9D8r8i:CTW7JJ7TW4i

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      2391fac3f69472f20ba381e3d2769fa0N.exe

    • Size

      29KB

    • MD5

      2391fac3f69472f20ba381e3d2769fa0

    • SHA1

      4651f8f3596315b273b6ceb8126efb8c83b88e52

    • SHA256

      373680dfbb1ede338a7d14827fb6bd0cbecc01099b5d88959e7e2f690e874aa4

    • SHA512

      e142e8f6611620b4ca19ca8dfa95d56ec55844ef1aafa9586aff894aa5f09e3b690ee85a0ab6bd050cf62ed74b0b8fc3baf069d558e586cdd9f132dc061034de

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9D8r8i:CTW7JJ7TW4i

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3359) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks