Overview

overview

9

Static

static

7

e814247bfd...09.exe

windows7-x64

9

e814247bfd...09.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    e814247bfda2ed77665f0d7b84ca88720f5e1754bfae46db3be80ab3672df909

  • Size

    1.1MB

  • Sample

    240902-fyccfasfkm

  • MD5

    1b2f2a30064490c174ce49146eaff040

  • SHA1

    e99654b802372caf5f78725e6bf989663a481672

  • SHA256

    e814247bfda2ed77665f0d7b84ca88720f5e1754bfae46db3be80ab3672df909

  • SHA512

    1d38d723879e809ad27643ae64d611335995590ddcd767bd85cdd0c6d4d5c8d7c10f8b3c508d8b08990194970e9272a8e168929d775e0ae6a3992ebb24b4af76

  • SSDEEP

    3072:fny1oRP01IRNeWlo9+0hh8HzMu3zs1u/Eu:KWR6u5

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      e814247bfda2ed77665f0d7b84ca88720f5e1754bfae46db3be80ab3672df909

    • Size

      1.1MB

    • MD5

      1b2f2a30064490c174ce49146eaff040

    • SHA1

      e99654b802372caf5f78725e6bf989663a481672

    • SHA256

      e814247bfda2ed77665f0d7b84ca88720f5e1754bfae46db3be80ab3672df909

    • SHA512

      1d38d723879e809ad27643ae64d611335995590ddcd767bd85cdd0c6d4d5c8d7c10f8b3c508d8b08990194970e9272a8e168929d775e0ae6a3992ebb24b4af76

    • SSDEEP

      3072:fny1oRP01IRNeWlo9+0hh8HzMu3zs1u/Eu:KWR6u5

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (1028) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks