Overview

overview

9

Static

static

7

469412928f...0N.exe

windows7-x64

9

469412928f...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    469412928f7f57a3b95ef6fe1bad9740N.exe

  • Size

    60KB

  • Sample

    240902-mtv3baycjl

  • MD5

    469412928f7f57a3b95ef6fe1bad9740

  • SHA1

    7684525047480dc3d2689adb1fac296644c201f6

  • SHA256

    119350b61559800c131b51d46f37b961dade7a8bae71ec7513ce31b77d0cd3f7

  • SHA512

    7ec035df69eb426ef1c02163b709f7f478e8af33474f8a36b3649bfbfc3a4162d3eed6e5634186d71fcb9fca2cacd9867c4139714358344e7f2d5ccbde372f26

  • SSDEEP

    1536:CTWn1++PJHJXA/OsIZfzc3/Q8zxY5dNPAm1:KQSox5fAm1

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      469412928f7f57a3b95ef6fe1bad9740N.exe

    • Size

      60KB

    • MD5

      469412928f7f57a3b95ef6fe1bad9740

    • SHA1

      7684525047480dc3d2689adb1fac296644c201f6

    • SHA256

      119350b61559800c131b51d46f37b961dade7a8bae71ec7513ce31b77d0cd3f7

    • SHA512

      7ec035df69eb426ef1c02163b709f7f478e8af33474f8a36b3649bfbfc3a4162d3eed6e5634186d71fcb9fca2cacd9867c4139714358344e7f2d5ccbde372f26

    • SSDEEP

      1536:CTWn1++PJHJXA/OsIZfzc3/Q8zxY5dNPAm1:KQSox5fAm1

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3206) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks