Overview

overview

9

Static

static

7

70245462a4...bN.exe

windows7-x64

9

70245462a4...bN.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    70245462a432f2a71b48c5fa85dacab869b51e48f29d6bc9cf50b6715854d4abN

  • Size

    75KB

  • Sample

    240919-hee1bswaqp

  • MD5

    cc64a708880b5d0e95181c40e7e11eb0

  • SHA1

    a236ea858cfeff41c70800098fe6336a89612b5f

  • SHA256

    70245462a432f2a71b48c5fa85dacab869b51e48f29d6bc9cf50b6715854d4ab

  • SHA512

    a1c0abe9c5fefe97915ebb0c264cd2d2adfc823dd2bd93cf871c9531cf182e214a40b794458a199b586df06d59fa03d0dbe336dbe0c4957c4885e9f3a5a125b4

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjSEXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2r3:V7Zf/FAxTWtnMdyGdy4AnAJYq8YqZ

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      70245462a432f2a71b48c5fa85dacab869b51e48f29d6bc9cf50b6715854d4abN

    • Size

      75KB

    • MD5

      cc64a708880b5d0e95181c40e7e11eb0

    • SHA1

      a236ea858cfeff41c70800098fe6336a89612b5f

    • SHA256

      70245462a432f2a71b48c5fa85dacab869b51e48f29d6bc9cf50b6715854d4ab

    • SHA512

      a1c0abe9c5fefe97915ebb0c264cd2d2adfc823dd2bd93cf871c9531cf182e214a40b794458a199b586df06d59fa03d0dbe336dbe0c4957c4885e9f3a5a125b4

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjSEXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2r3:V7Zf/FAxTWtnMdyGdy4AnAJYq8YqZ

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3264) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks