Overview

overview

9

Static

static

7

3a1985532a...0N.exe

windows7-x64

9

3a1985532a...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    3a1985532abaf806eda83c1eb5855d80N.exe

  • Size

    79KB

  • Sample

    240903-v8xtfsscll

  • MD5

    3a1985532abaf806eda83c1eb5855d80

  • SHA1

    7ed8dd5f0ae6a8fb2073ad2222650b9a9d81ce5a

  • SHA256

    8d0821c276bb477b3ea2b8752b6f0ce07f0d6140d4e9556a1b5e00b3e4da0d65

  • SHA512

    ffaba3a5884b2ce858718ba8be79dd2e3636c3fe3eadabb212b5714c8cf60343c3a7ca306c3e179cdb4f281b10986737f897aa6e5724bddf6d385773a04ae641

  • SSDEEP

    1536:V7Zf/FAxTWoJJZENTB/oP0DP0n3eTW7JJZENTB/oP0DP0I:fny1tEIP0DP0NtEIP0DP0I

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      3a1985532abaf806eda83c1eb5855d80N.exe

    • Size

      79KB

    • MD5

      3a1985532abaf806eda83c1eb5855d80

    • SHA1

      7ed8dd5f0ae6a8fb2073ad2222650b9a9d81ce5a

    • SHA256

      8d0821c276bb477b3ea2b8752b6f0ce07f0d6140d4e9556a1b5e00b3e4da0d65

    • SHA512

      ffaba3a5884b2ce858718ba8be79dd2e3636c3fe3eadabb212b5714c8cf60343c3a7ca306c3e179cdb4f281b10986737f897aa6e5724bddf6d385773a04ae641

    • SSDEEP

      1536:V7Zf/FAxTWoJJZENTB/oP0DP0n3eTW7JJZENTB/oP0DP0I:fny1tEIP0DP0NtEIP0DP0I

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (362) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks