Overview

overview

9

Static

static

7

c66f6003c3...0N.exe

windows7-x64

9

c66f6003c3...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    c66f6003c373a6307a1f7b220da181c0N.exe

  • Size

    1.3MB

  • Sample

    240905-fa9b9sshpk

  • MD5

    c66f6003c373a6307a1f7b220da181c0

  • SHA1

    89157bfe0dae14c8d24746a0252416086062566c

  • SHA256

    e66756e7fa18d639f3bef65ffab53f234dddaf7bdc6184751d18f996e1b387f4

  • SHA512

    dd95818411488cbe8ac82fe0d3c5585ebfc80f8f408b3b960a9f81d58e3781aaf4f4786eb446190486be1185528e184185a642590ee94a5a7bf4dc1f2c783935

  • SSDEEP

    3072:fny1tEevefo5+sa/rcCRyFNSH/kHZHGvAbFFcypg/qdeyhoKn/Ad0yJQe:KbE8cqSH/kHZHGvARndvMJX

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      c66f6003c373a6307a1f7b220da181c0N.exe

    • Size

      1.3MB

    • MD5

      c66f6003c373a6307a1f7b220da181c0

    • SHA1

      89157bfe0dae14c8d24746a0252416086062566c

    • SHA256

      e66756e7fa18d639f3bef65ffab53f234dddaf7bdc6184751d18f996e1b387f4

    • SHA512

      dd95818411488cbe8ac82fe0d3c5585ebfc80f8f408b3b960a9f81d58e3781aaf4f4786eb446190486be1185528e184185a642590ee94a5a7bf4dc1f2c783935

    • SSDEEP

      3072:fny1tEevefo5+sa/rcCRyFNSH/kHZHGvAbFFcypg/qdeyhoKn/Ad0yJQe:KbE8cqSH/kHZHGvARndvMJX

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (338) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks