Overview

overview

9

Static

static

7

cea1bdcf64...0N.exe

windows7-x64

9

cea1bdcf64...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    cea1bdcf6436a8696c04e5b05744daa0N.exe

  • Size

    48KB

  • Sample

    240904-raecns1fmq

  • MD5

    cea1bdcf6436a8696c04e5b05744daa0

  • SHA1

    1612fee29d610a44c1e863f1e99ab5e39d36dbce

  • SHA256

    72659d780a840177121f579c9ebbdb388de12a23c510dbd1393073aac64ccf88

  • SHA512

    0d326cffc9cc1f15126e68ae840dfaefc569c3403c0321ba3ab6c10df83f26250a57f1c1a6bcefcb78ad683af7e7ce32127c8508b4d65a0c52d7044ad9536829

  • SSDEEP

    768:kBT37CPKK1EXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rcu90TKe+0TKeinMd7:CTWUnMdyGdyoIOIiWk

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      cea1bdcf6436a8696c04e5b05744daa0N.exe

    • Size

      48KB

    • MD5

      cea1bdcf6436a8696c04e5b05744daa0

    • SHA1

      1612fee29d610a44c1e863f1e99ab5e39d36dbce

    • SHA256

      72659d780a840177121f579c9ebbdb388de12a23c510dbd1393073aac64ccf88

    • SHA512

      0d326cffc9cc1f15126e68ae840dfaefc569c3403c0321ba3ab6c10df83f26250a57f1c1a6bcefcb78ad683af7e7ce32127c8508b4d65a0c52d7044ad9536829

    • SSDEEP

      768:kBT37CPKK1EXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rcu90TKe+0TKeinMd7:CTWUnMdyGdyoIOIiWk

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3318) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks