Overview

overview

9

Static

static

7

dd8ed68c6a...3f.exe

windows7-x64

9

dd8ed68c6a...3f.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    dd8ed68c6ad844643f240a3063c19c98c6490d027b331da92cf5506c37ffb23f

  • Size

    58KB

  • Sample

    240902-fehp4ssarq

  • MD5

    562c89406b6b60a9f05ff786b99cb6ff

  • SHA1

    015c5b513d1ce43e1f31cfec4e5d7c1e5c26c6ac

  • SHA256

    dd8ed68c6ad844643f240a3063c19c98c6490d027b331da92cf5506c37ffb23f

  • SHA512

    9805da325ee6e7f83030890c4cf8a6bf6998e18285426fd4c43f4ceef9a474ad40c8f9f706748c2384cfd116833ef97f7568d63c1a28b746c95f10e78248d049

  • SSDEEP

    768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATNy2/mepYXwILQ7ZVnEbisFhiXFharu:CTW7JJZENTNyavf73tQqarjrnfQfN

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      dd8ed68c6ad844643f240a3063c19c98c6490d027b331da92cf5506c37ffb23f

    • Size

      58KB

    • MD5

      562c89406b6b60a9f05ff786b99cb6ff

    • SHA1

      015c5b513d1ce43e1f31cfec4e5d7c1e5c26c6ac

    • SHA256

      dd8ed68c6ad844643f240a3063c19c98c6490d027b331da92cf5506c37ffb23f

    • SHA512

      9805da325ee6e7f83030890c4cf8a6bf6998e18285426fd4c43f4ceef9a474ad40c8f9f706748c2384cfd116833ef97f7568d63c1a28b746c95f10e78248d049

    • SSDEEP

      768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATNy2/mepYXwILQ7ZVnEbisFhiXFharu:CTW7JJZENTNyavf73tQqarjrnfQfN

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3797) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks