Overview

overview

9

Static

static

5

45a1ecfc37...9N.exe

windows7-x64

9

45a1ecfc37...9N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    45a1ecfc37b71688fbabb181f75832d009e4dc4541e267ea85eec5831a635d59N.exe

  • Size

    67KB

  • Sample

    240925-kvxleswern

  • MD5

    8d0d531abbab040746551883ca57c6b0

  • SHA1

    d109bb6c5e3a4a1f735bcc96316e586243ab0822

  • SHA256

    45a1ecfc37b71688fbabb181f75832d009e4dc4541e267ea85eec5831a635d59

  • SHA512

    1a6204651537222a5a657ab3a6fa3502dc35d8b5e72c69898493c105c9763fbc11fad25e571cc48ee6c77e72cb1c104b757cf542b6fe0b2091f7a2add49f5a6d

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcwBcCBcw/tio/tiDoe+oer:V7Zf/FAxTWoJJ7TTQoQtEr

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      45a1ecfc37b71688fbabb181f75832d009e4dc4541e267ea85eec5831a635d59N.exe

    • Size

      67KB

    • MD5

      8d0d531abbab040746551883ca57c6b0

    • SHA1

      d109bb6c5e3a4a1f735bcc96316e586243ab0822

    • SHA256

      45a1ecfc37b71688fbabb181f75832d009e4dc4541e267ea85eec5831a635d59

    • SHA512

      1a6204651537222a5a657ab3a6fa3502dc35d8b5e72c69898493c105c9763fbc11fad25e571cc48ee6c77e72cb1c104b757cf542b6fe0b2091f7a2add49f5a6d

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcwBcCBcw/tio/tiDoe+oer:V7Zf/FAxTWoJJ7TTQoQtEr

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (600) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks