Overview

overview

9

Static

static

7

815b32b8c5...0N.exe

windows7-x64

9

815b32b8c5...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    815b32b8c5d5ec2da65c5594e7c8e640N.exe

  • Size

    83KB

  • Sample

    240909-rygspsvhpe

  • MD5

    815b32b8c5d5ec2da65c5594e7c8e640

  • SHA1

    92cb99bad0b4018a78ff0bbcd64cee275dfb6a6e

  • SHA256

    df4c3a4013078a20285f6c6cefeab02162147ffb3668394befcf29ebb3ee792d

  • SHA512

    7e6172be5f5cc92162cab4efd00d37ee404cdf158e5bd782d57512913b046aff3e50cf3da9e3cecef99f445a1531c9be9740de913e7804b789f0ea698197eec4

  • SSDEEP

    768:t6bMCc2nQUM/zX1vqX1vcjyjWWbW4zhLXJ4FhLXJ4OpZtszpZts1faF/MF/u:t6whEUyjK5yOpjszpjsi2W

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      815b32b8c5d5ec2da65c5594e7c8e640N.exe

    • Size

      83KB

    • MD5

      815b32b8c5d5ec2da65c5594e7c8e640

    • SHA1

      92cb99bad0b4018a78ff0bbcd64cee275dfb6a6e

    • SHA256

      df4c3a4013078a20285f6c6cefeab02162147ffb3668394befcf29ebb3ee792d

    • SHA512

      7e6172be5f5cc92162cab4efd00d37ee404cdf158e5bd782d57512913b046aff3e50cf3da9e3cecef99f445a1531c9be9740de913e7804b789f0ea698197eec4

    • SSDEEP

      768:t6bMCc2nQUM/zX1vqX1vcjyjWWbW4zhLXJ4FhLXJ4OpZtszpZts1faF/MF/u:t6whEUyjK5yOpjszpjsi2W

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (2934) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks