Overview

overview

9

Static

static

7

b58144c1ac...0N.exe

windows7-x64

9

b58144c1ac...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b58144c1aced5dc120efcc4db1819b40N.exe

  • Size

    85KB

  • Sample

    240905-vhaagavgkn

  • MD5

    b58144c1aced5dc120efcc4db1819b40

  • SHA1

    df18ab350f82c73efe001fe971e43bd1f60c2b69

  • SHA256

    dff3f7303c6f761465cbe7747d0de7ea69fc51eafa6bfe38e9b8fdedc268a393

  • SHA512

    68c8d9e4ad98c8a24d88584f87288cd135ecac28828a53d8d9aefa39f9a2432cd8356dfdc426dc65100786d2cc4183a4bb813330c9d307dbe9859c1de340fa28

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8IZTQovdcvL1eovdcvL1d:fnyiQSo7ZsAdcheAdchd

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      b58144c1aced5dc120efcc4db1819b40N.exe

    • Size

      85KB

    • MD5

      b58144c1aced5dc120efcc4db1819b40

    • SHA1

      df18ab350f82c73efe001fe971e43bd1f60c2b69

    • SHA256

      dff3f7303c6f761465cbe7747d0de7ea69fc51eafa6bfe38e9b8fdedc268a393

    • SHA512

      68c8d9e4ad98c8a24d88584f87288cd135ecac28828a53d8d9aefa39f9a2432cd8356dfdc426dc65100786d2cc4183a4bb813330c9d307dbe9859c1de340fa28

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8IZTQovdcvL1eovdcvL1d:fnyiQSo7ZsAdcheAdchd

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (419) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks