Overview

overview

9

Static

static

7

41f203994c...0N.exe

windows7-x64

9

41f203994c...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    41f203994ca94ba01c98df4ea9ece5a0N.exe

  • Size

    75KB

  • Sample

    240906-24wh6asflf

  • MD5

    41f203994ca94ba01c98df4ea9ece5a0

  • SHA1

    d6f4cd53db6f01432b898186dec235351f493a2b

  • SHA256

    e1a5ff8c0c43ee3bdddfbb49798ed640fdc609fbf4d69593fc83efc5883e6eb2

  • SHA512

    58526a5ab8fe638b04f8ec5bcdfef44fa5ec36b0b839bdccb59788ab82db03d7eb073e485defbf041ff307985f402cae680306a130f113bcd07cd738cc7559f0

  • SSDEEP

    768:a7BlpyqaFAK65euBT37CPKKDm7EJJ1EXBwzEXBwdcMcI99BT37CPKKdJJ1EXBwz8:a7ZyqaFAxTWbJJ7TlTW7JJ7T+

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      41f203994ca94ba01c98df4ea9ece5a0N.exe

    • Size

      75KB

    • MD5

      41f203994ca94ba01c98df4ea9ece5a0

    • SHA1

      d6f4cd53db6f01432b898186dec235351f493a2b

    • SHA256

      e1a5ff8c0c43ee3bdddfbb49798ed640fdc609fbf4d69593fc83efc5883e6eb2

    • SHA512

      58526a5ab8fe638b04f8ec5bcdfef44fa5ec36b0b839bdccb59788ab82db03d7eb073e485defbf041ff307985f402cae680306a130f113bcd07cd738cc7559f0

    • SSDEEP

      768:a7BlpyqaFAK65euBT37CPKKDm7EJJ1EXBwzEXBwdcMcI99BT37CPKKdJJ1EXBwz8:a7ZyqaFAxTWbJJ7TlTW7JJ7T+

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3155) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks