Overview

overview

9

Static

static

7

c06fa66d78...0N.exe

windows7-x64

9

c06fa66d78...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c06fa66d78772575e2deea6d48505850N

  • Size

    144KB

  • Sample

    240914-nl9feasblg

  • MD5

    c06fa66d78772575e2deea6d48505850

  • SHA1

    156622fe1b42d4da1250e156b8e0a45bf59bb987

  • SHA256

    851b5af4dc8af34971a33c4a4c6df53cb9fad60e91977e542fbb1978473b704f

  • SHA512

    bf1f353cbf9663375ef032c079958b4a5302a464afedb4a065b099ee0f8ccaeafb1ea8917ca9ba0347ee4be2ccd554bf3bf54170723c78539a41f49f2bd24490

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxY5dN74uTWn1++PJHJXA/OsIZfzc3/z:fnyiQSox5/QSox5Y

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      c06fa66d78772575e2deea6d48505850N

    • Size

      144KB

    • MD5

      c06fa66d78772575e2deea6d48505850

    • SHA1

      156622fe1b42d4da1250e156b8e0a45bf59bb987

    • SHA256

      851b5af4dc8af34971a33c4a4c6df53cb9fad60e91977e542fbb1978473b704f

    • SHA512

      bf1f353cbf9663375ef032c079958b4a5302a464afedb4a065b099ee0f8ccaeafb1ea8917ca9ba0347ee4be2ccd554bf3bf54170723c78539a41f49f2bd24490

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxY5dN74uTWn1++PJHJXA/OsIZfzc3/z:fnyiQSox5/QSox5Y

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (2837) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks