Overview

overview

9

Static

static

7

31a224d6c3...0N.exe

windows7-x64

9

31a224d6c3...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    31a224d6c389a9c9678ca69b30a14b90N.exe

  • Size

    33KB

  • Sample

    240901-tv9enawarn

  • MD5

    31a224d6c389a9c9678ca69b30a14b90

  • SHA1

    cf28d036756395f93468b110fb3994c1d59c2ede

  • SHA256

    91acecf79fe8b39e1476bfacc0e7e28db9c8cc370feff0132b4468ce367dc166

  • SHA512

    d95422a47ab6af0522c6ed3228fac93b25ccc30d94402271999d146ad77735da2a30308164dd0cfce801d56401e7695db5b001c54b5e56269d4f740afde5b02a

  • SSDEEP

    768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATBApwp133EskmKsN33EskmKsZR:CTW7JJZENTBAOIfmKJfmKQR

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      31a224d6c389a9c9678ca69b30a14b90N.exe

    • Size

      33KB

    • MD5

      31a224d6c389a9c9678ca69b30a14b90

    • SHA1

      cf28d036756395f93468b110fb3994c1d59c2ede

    • SHA256

      91acecf79fe8b39e1476bfacc0e7e28db9c8cc370feff0132b4468ce367dc166

    • SHA512

      d95422a47ab6af0522c6ed3228fac93b25ccc30d94402271999d146ad77735da2a30308164dd0cfce801d56401e7695db5b001c54b5e56269d4f740afde5b02a

    • SSDEEP

      768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATBApwp133EskmKsN33EskmKsZR:CTW7JJZENTBAOIfmKJfmKQR

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3376) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks