Overview

overview

9

Static

static

7

e636d5e5fb...ab.exe

windows7-x64

9

e636d5e5fb...ab.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e636d5e5fb6d62b7dce5bde6a6076ec000504e43ff9a577a58917efb13f389ab

  • Size

    24KB

  • Sample

    240919-dfgs4axdpd

  • MD5

    70d56fd1d4dc1921869af0faec886c20

  • SHA1

    77913c2048aba8001d56ca586be4a47194c4df7d

  • SHA256

    e636d5e5fb6d62b7dce5bde6a6076ec000504e43ff9a577a58917efb13f389ab

  • SHA512

    004c65c2956206e7e9eae7f9db98f194a6e4b962832b60549b07269e683df103ac7424f6c0f8f0100a352a2a9b9c38af60d8ca7c8c97149ad5a08d889be22c89

  • SSDEEP

    384:QOlIBXDaU7CPKK0TIhfJJ1Evd5BvhzaM9mSIEvd5BvhzaM9mSsxmMxm9+9qQn:kBT37CPKKdJJ1EXBwzEXBwdcMcI9p

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      e636d5e5fb6d62b7dce5bde6a6076ec000504e43ff9a577a58917efb13f389ab

    • Size

      24KB

    • MD5

      70d56fd1d4dc1921869af0faec886c20

    • SHA1

      77913c2048aba8001d56ca586be4a47194c4df7d

    • SHA256

      e636d5e5fb6d62b7dce5bde6a6076ec000504e43ff9a577a58917efb13f389ab

    • SHA512

      004c65c2956206e7e9eae7f9db98f194a6e4b962832b60549b07269e683df103ac7424f6c0f8f0100a352a2a9b9c38af60d8ca7c8c97149ad5a08d889be22c89

    • SSDEEP

      384:QOlIBXDaU7CPKK0TIhfJJ1Evd5BvhzaM9mSIEvd5BvhzaM9mSsxmMxm9+9qQn:kBT37CPKKdJJ1EXBwzEXBwdcMcI9p

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (4173) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks