Overview

overview

9

Static

static

7

4947327436...cN.exe

windows7-x64

9

4947327436...cN.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4947327436dca96bfd56fc4b7d258d319ed5c1dabdc000875c8b06b1638be68cN

  • Size

    141KB

  • Sample

    240919-hhqagawcjl

  • MD5

    c9ec3a35e50bab71e4b1a66312f4c560

  • SHA1

    525c49bb63dd97bca819d4af48c001163679115b

  • SHA256

    4947327436dca96bfd56fc4b7d258d319ed5c1dabdc000875c8b06b1638be68c

  • SHA512

    df9b8c8405b2a0e96bd9ec736a902a3f6f97625df570d150d350460a63f00af58268c3e12f7969fcc74eb68e3998611c0db1133bb9ccf8711ab3af747b0376c5

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8IZTrQOv/i+vrA+SCm7x1wzz:fnyiQSo7Z7ni+9m7x1wzz

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      4947327436dca96bfd56fc4b7d258d319ed5c1dabdc000875c8b06b1638be68cN

    • Size

      141KB

    • MD5

      c9ec3a35e50bab71e4b1a66312f4c560

    • SHA1

      525c49bb63dd97bca819d4af48c001163679115b

    • SHA256

      4947327436dca96bfd56fc4b7d258d319ed5c1dabdc000875c8b06b1638be68c

    • SHA512

      df9b8c8405b2a0e96bd9ec736a902a3f6f97625df570d150d350460a63f00af58268c3e12f7969fcc74eb68e3998611c0db1133bb9ccf8711ab3af747b0376c5

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8IZTrQOv/i+vrA+SCm7x1wzz:fnyiQSo7Z7ni+9m7x1wzz

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (2846) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks