989d399d302b812baeaf5d9cedfd8452b248c6abac164f503bb50bbea559cb17 | Triage

Submit
Reports

Overview

overview

9

Static

static

7

989d399d30...7N.exe

windows7-x64

9

989d399d30...7N.exe

windows10-2004-x64

Sharing

General

Target

989d399d302b812baeaf5d9cedfd8452b248c6abac164f503bb50bbea559cb17N
Size

50KB
Sample

240918-kygdlssdpb
MD5

2efd449f981991bdd001eeac0ae70cd0
SHA1

fe8426297864ef13e685ae61a03442565f38c982
SHA256

989d399d302b812baeaf5d9cedfd8452b248c6abac164f503bb50bbea559cb17
SHA512

89c7f756349e974252d19f4b3079fb9ba8d4534329edcf447d7816c25d184e7fdd8038d09cab277cf849acf4c2c2fed3f95fbe19096385f85c325f774cee7c94
SSDEEP

768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9ebZoLSKS1:V7Zf/FAxTWoJJ7TYZoLRm

Score

9^/10

discovery ransomware upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

989d399d302b812baeaf5d9cedfd8452b248c6abac164f503bb50bbea559cb17N.exe

Resource

win7-20240903-en

discovery ransomware upx

windows7-x64

4 signatures

120 seconds

Behavioral task

behavioral2

Sample

989d399d302b812baeaf5d9cedfd8452b248c6abac164f503bb50bbea559cb17N.exe

Resource

win10v2004-20240802-en

discovery ransomware upx

windows10-2004-x64

4 signatures

120 seconds

Malware Config

Targets

- Target
  
  989d399d302b812baeaf5d9cedfd8452b248c6abac164f503bb50bbea559cb17N
- Size
  
  50KB
- MD5
  
  2efd449f981991bdd001eeac0ae70cd0
- SHA1
  
  fe8426297864ef13e685ae61a03442565f38c982
- SHA256
  
  989d399d302b812baeaf5d9cedfd8452b248c6abac164f503bb50bbea559cb17
- SHA512
  
  89c7f756349e974252d19f4b3079fb9ba8d4534329edcf447d7816c25d184e7fdd8038d09cab277cf849acf4c2c2fed3f95fbe19096385f85c325f774cee7c94
- SSDEEP
  
  768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9ebZoLSKS1:V7Zf/FAxTWoJJ7TYZoLRm
Score

9^/10

discovery ransomware upx
- Renames multiple (3418) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomwareupx

behavioral2

discoveryransomwareupx

© 2018-2025

Terms | Privacy