Overview

overview

9

Static

static

7

05b9c94552...0N.exe

windows7-x64

9

05b9c94552...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    05b9c9455260321c96cc6cf1b1331040N.exe

  • Size

    61KB

  • Sample

    240902-hs4wlsvcrj

  • MD5

    05b9c9455260321c96cc6cf1b1331040

  • SHA1

    779654b2535b3af14d699aaf7eeb52edd2ecfa09

  • SHA256

    6990a8bd76a6484c5e6aa14d69b0833e72abb066f93e251c415c986bb41efe2b

  • SHA512

    168cd05a6b26045179f32b117d1aa0db3642e99498033f11c0729726836777edcb3b07848385379212c1a70695a139e4446b898d22ba2b31e1611fc966e67249

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJjtf8WUtf8WZCqCrY4Y/bww9ySqbww9ySj:V7Zf/FAxTWoJJ2WjWZCqC2wHwY

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      05b9c9455260321c96cc6cf1b1331040N.exe

    • Size

      61KB

    • MD5

      05b9c9455260321c96cc6cf1b1331040

    • SHA1

      779654b2535b3af14d699aaf7eeb52edd2ecfa09

    • SHA256

      6990a8bd76a6484c5e6aa14d69b0833e72abb066f93e251c415c986bb41efe2b

    • SHA512

      168cd05a6b26045179f32b117d1aa0db3642e99498033f11c0729726836777edcb3b07848385379212c1a70695a139e4446b898d22ba2b31e1611fc966e67249

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJjtf8WUtf8WZCqCrY4Y/bww9ySqbww9ySj:V7Zf/FAxTWoJJ2WjWZCqC2wHwY

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3211) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks