Overview

overview

9

Static

static

7

25b9aae5b5...0N.exe

windows7-x64

9

25b9aae5b5...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    25b9aae5b5370af81a827f48ee32e9b0N.exe

  • Size

    98KB

  • Sample

    240902-hs61zavcrk

  • MD5

    25b9aae5b5370af81a827f48ee32e9b0

  • SHA1

    440eced12e10b312b37877e5b02afacc823b93fc

  • SHA256

    0679fb934187386f9a1a8a3f7cfd08ae7c3d7bb3becd9caf9fa4fdeea1c3ed57

  • SHA512

    d9bbaf87cdea99d6eeee44794f987050a31244a48c0b69cb1fc3e6064c5f53efc61c6a49ed60647ccecef6128216963aa3d160ce38f4253119013fce6ebd377a

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxviYiaEWYMjp:fnyiQSo4iYiIYMjp

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      25b9aae5b5370af81a827f48ee32e9b0N.exe

    • Size

      98KB

    • MD5

      25b9aae5b5370af81a827f48ee32e9b0

    • SHA1

      440eced12e10b312b37877e5b02afacc823b93fc

    • SHA256

      0679fb934187386f9a1a8a3f7cfd08ae7c3d7bb3becd9caf9fa4fdeea1c3ed57

    • SHA512

      d9bbaf87cdea99d6eeee44794f987050a31244a48c0b69cb1fc3e6064c5f53efc61c6a49ed60647ccecef6128216963aa3d160ce38f4253119013fce6ebd377a

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxviYiaEWYMjp:fnyiQSo4iYiIYMjp

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (2926) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks