Overview

overview

9

Static

static

7

ff35885c21...db.exe

windows7-x64

9

ff35885c21...db.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ff35885c21f2ffb613e45e28b34f6f4db77c9dc0100941b18883a685e01c86db.exe

  • Size

    57KB

  • Sample

    240908-fvmn1azhrb

  • MD5

    69de65780bf077c5ce7745d54ccc7b8d

  • SHA1

    448291d340ce77cea0d2b2a4355817acddf12f7d

  • SHA256

    ff35885c21f2ffb613e45e28b34f6f4db77c9dc0100941b18883a685e01c86db

  • SHA512

    efad72779d0fee69b47e6eddb97d4ea5f202fe9930754dcea7dd52468a26ffbab43782f7ef527c94768e083f2b08f470ee790142a72d576f55cf6055120e387a

  • SSDEEP

    768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFIp:CTWn1++PJHJXA/OsIZfzc3/Q8IZTRVP

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      ff35885c21f2ffb613e45e28b34f6f4db77c9dc0100941b18883a685e01c86db.exe

    • Size

      57KB

    • MD5

      69de65780bf077c5ce7745d54ccc7b8d

    • SHA1

      448291d340ce77cea0d2b2a4355817acddf12f7d

    • SHA256

      ff35885c21f2ffb613e45e28b34f6f4db77c9dc0100941b18883a685e01c86db

    • SHA512

      efad72779d0fee69b47e6eddb97d4ea5f202fe9930754dcea7dd52468a26ffbab43782f7ef527c94768e083f2b08f470ee790142a72d576f55cf6055120e387a

    • SSDEEP

      768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFIp:CTWn1++PJHJXA/OsIZfzc3/Q8IZTRVP

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (827) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks