Overview

overview

9

Static

static

7

f3b3bf364d...8a.exe

windows7-x64

9

f3b3bf364d...8a.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f3b3bf364dd68899bc5ead5dfd2c211d347d129c0eb1f806f14ddf17aa38718a

  • Size

    41KB

  • Sample

    240919-dygk2sycjd

  • MD5

    20d49eb6d359108f567e0bed3a0b1a70

  • SHA1

    4f3d3744b1bca7e78639b2a49a52dfbeafe337a4

  • SHA256

    f3b3bf364dd68899bc5ead5dfd2c211d347d129c0eb1f806f14ddf17aa38718a

  • SHA512

    451e6cd50f0e3b19cf5a0bacbc258f83611d4d691f57aae344064d756003a736fbbc7c17e26b901183133a29c793039f0b1f37a2eecf3cc7f1ce5d6c641d179f

  • SSDEEP

    768:kBT37CPKK1EXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rcu90TKe+0TKeIiKxy:CTWJGpG8nIx

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      f3b3bf364dd68899bc5ead5dfd2c211d347d129c0eb1f806f14ddf17aa38718a

    • Size

      41KB

    • MD5

      20d49eb6d359108f567e0bed3a0b1a70

    • SHA1

      4f3d3744b1bca7e78639b2a49a52dfbeafe337a4

    • SHA256

      f3b3bf364dd68899bc5ead5dfd2c211d347d129c0eb1f806f14ddf17aa38718a

    • SHA512

      451e6cd50f0e3b19cf5a0bacbc258f83611d4d691f57aae344064d756003a736fbbc7c17e26b901183133a29c793039f0b1f37a2eecf3cc7f1ce5d6c641d179f

    • SSDEEP

      768:kBT37CPKK1EXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rcu90TKe+0TKeIiKxy:CTWJGpG8nIx

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3825) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks