16df87b15565ba524cc28886a10a8af02dec5aad626874d9779e4000399d42be | Triage

Submit
Reports

Overview

overview

9

Static

static

7

16df87b155...eN.exe

windows7-x64

9

16df87b155...eN.exe

windows10-2004-x64

9

Sharing

General

Target

16df87b15565ba524cc28886a10a8af02dec5aad626874d9779e4000399d42beN
Size

101KB
Sample

240918-kt4cksshll
MD5

4902ae2031d7fb54f5fa7882757c2f70
SHA1

b5f86d9fba455342a4ed92e5881d4d33c39d1909
SHA256

16df87b15565ba524cc28886a10a8af02dec5aad626874d9779e4000399d42be
SHA512

2c6232fcf4cf04b92ff40746c075fbe13e61b3bc85de300fec32acf02d6c30532d02e89e0137024b62ddbb167b8b06f87ca6b142221465c337230bf630379f06
SSDEEP

768:V7Blpf/FAK65euBT37CPKKQSjSEXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rE:V7Zf/FAxTWtnMdyGdy+TWUnMdyGdyWV4

Score

9^/10

discovery ransomware upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

16df87b15565ba524cc28886a10a8af02dec5aad626874d9779e4000399d42beN.exe

Resource

win7-20240708-en

discovery ransomware upx

windows7-x64

4 signatures

120 seconds

Behavioral task

behavioral2

Sample

16df87b15565ba524cc28886a10a8af02dec5aad626874d9779e4000399d42beN.exe

Resource

win10v2004-20240802-en

discovery ransomware upx

windows10-2004-x64

4 signatures

120 seconds

Malware Config

Targets

- Target
  
  16df87b15565ba524cc28886a10a8af02dec5aad626874d9779e4000399d42beN
- Size
  
  101KB
- MD5
  
  4902ae2031d7fb54f5fa7882757c2f70
- SHA1
  
  b5f86d9fba455342a4ed92e5881d4d33c39d1909
- SHA256
  
  16df87b15565ba524cc28886a10a8af02dec5aad626874d9779e4000399d42be
- SHA512
  
  2c6232fcf4cf04b92ff40746c075fbe13e61b3bc85de300fec32acf02d6c30532d02e89e0137024b62ddbb167b8b06f87ca6b142221465c337230bf630379f06
- SSDEEP
  
  768:V7Blpf/FAK65euBT37CPKKQSjSEXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rE:V7Zf/FAxTWtnMdyGdy+TWUnMdyGdyWV4
Score

9^/10

discovery ransomware upx
- Renames multiple (3067) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomwareupx

behavioral2

discoveryransomwareupx

© 2018-2025

Terms | Privacy