Overview

overview

9

Static

static

7

519a2f588f...8N.exe

windows7-x64

9

519a2f588f...8N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    519a2f588fb6058c955753cdc12fb9dcb3162dfb5f765491dd03f0a9772d00f8N

  • Size

    67KB

  • Sample

    240921-c8jbys1fqf

  • MD5

    b22142531dd0048dd5bcd46f5b49f170

  • SHA1

    94afdadc5461d3f0f3f2076772f7802c209c69e2

  • SHA256

    519a2f588fb6058c955753cdc12fb9dcb3162dfb5f765491dd03f0a9772d00f8

  • SHA512

    fe8b49fa1b638766e5de3050a5c2e3df90ea2c2447563108f703d089dd959e707cd708b11940ee28fcb08389198ee8af3b46a4036685683206b8676a548089ea

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcwBcCBcw/tio/tiK4fZ9Z3U:V7Zf/FAxTWoJJ7TTQoQI

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      519a2f588fb6058c955753cdc12fb9dcb3162dfb5f765491dd03f0a9772d00f8N

    • Size

      67KB

    • MD5

      b22142531dd0048dd5bcd46f5b49f170

    • SHA1

      94afdadc5461d3f0f3f2076772f7802c209c69e2

    • SHA256

      519a2f588fb6058c955753cdc12fb9dcb3162dfb5f765491dd03f0a9772d00f8

    • SHA512

      fe8b49fa1b638766e5de3050a5c2e3df90ea2c2447563108f703d089dd959e707cd708b11940ee28fcb08389198ee8af3b46a4036685683206b8676a548089ea

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcwBcCBcw/tio/tiK4fZ9Z3U:V7Zf/FAxTWoJJ7TTQoQI

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3138) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks