Overview

overview

9

Static

static

7

f197f3a028...0N.exe

windows7-x64

9

f197f3a028...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    f197f3a02854781b3a8de64526670360N.exe

  • Size

    57KB

  • Sample

    240903-jb5l9ascna

  • MD5

    f197f3a02854781b3a8de64526670360

  • SHA1

    8c505676a91946c3b6c077acaf5ff6c82dba9bf3

  • SHA256

    acb8b03836f88b3417dec071ef92902d16141ebebd418b592086ee2749f8aa81

  • SHA512

    6e38992266bcda9f46828b0a467142d6741fcd5b06cbb1fa72af69380d170bbc5b661426cb8789b2a806660380f6b48c3892cb9926c4c321c4bbdae95156b79d

  • SSDEEP

    1536:V7Zf/FAxTWoJJZENTNyQYawJLZ8/JLZ8r:fny1tE8

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      f197f3a02854781b3a8de64526670360N.exe

    • Size

      57KB

    • MD5

      f197f3a02854781b3a8de64526670360

    • SHA1

      8c505676a91946c3b6c077acaf5ff6c82dba9bf3

    • SHA256

      acb8b03836f88b3417dec071ef92902d16141ebebd418b592086ee2749f8aa81

    • SHA512

      6e38992266bcda9f46828b0a467142d6741fcd5b06cbb1fa72af69380d170bbc5b661426cb8789b2a806660380f6b48c3892cb9926c4c321c4bbdae95156b79d

    • SSDEEP

      1536:V7Zf/FAxTWoJJZENTNyQYawJLZ8/JLZ8r:fny1tE8

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3292) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks