Overview

overview

9

Static

static

7

11b811ae1c...a3.exe

windows7-x64

9

11b811ae1c...a3.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    11b811ae1c700a06f9361c12b626f9ea1d6c053d29c4d9c69f5adabecb0306a3

  • Size

    110KB

  • Sample

    240901-xglyzsyfmk

  • MD5

    c3f6a76ae25418c6511f3f016d7f745b

  • SHA1

    3eb56d7ba9c6e487abac2a9b6dd68609a4f3883d

  • SHA256

    11b811ae1c700a06f9361c12b626f9ea1d6c053d29c4d9c69f5adabecb0306a3

  • SHA512

    8bac1761359f4d378b081546cfaec7de84a2e9bbea7b8f6545b5b7041cd84549f0dec1b3451f9d79e1f899a14dc0cd2574ce3f24f5eb9e1bc168afbb93f0d5ac

  • SSDEEP

    1536:V7Zf/FAxTWoJJ7TxiHYuZ+3MzRn2xpK6n5+AMKAbH6EmQFUczenc8yr:fny1di4eLz1ipxjMKm0KUFncv

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      11b811ae1c700a06f9361c12b626f9ea1d6c053d29c4d9c69f5adabecb0306a3

    • Size

      110KB

    • MD5

      c3f6a76ae25418c6511f3f016d7f745b

    • SHA1

      3eb56d7ba9c6e487abac2a9b6dd68609a4f3883d

    • SHA256

      11b811ae1c700a06f9361c12b626f9ea1d6c053d29c4d9c69f5adabecb0306a3

    • SHA512

      8bac1761359f4d378b081546cfaec7de84a2e9bbea7b8f6545b5b7041cd84549f0dec1b3451f9d79e1f899a14dc0cd2574ce3f24f5eb9e1bc168afbb93f0d5ac

    • SSDEEP

      1536:V7Zf/FAxTWoJJ7TxiHYuZ+3MzRn2xpK6n5+AMKAbH6EmQFUczenc8yr:fny1di4eLz1ipxjMKm0KUFncv

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3111) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks