Overview

overview

9

Static

static

5

bcd59645a2...8N.exe

windows7-x64

9

bcd59645a2...8N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bcd59645a2f6c673ec9bce924729d6e6fa6613efd96af95750abcce5cc507b28N.exe

  • Size

    35KB

  • Sample

    240925-y2nhzsyerd

  • MD5

    ef12a8b2dbc601336c76b69823035dd0

  • SHA1

    48ed2da0c77210d18462d7b5437bd68f78827c4d

  • SHA256

    bcd59645a2f6c673ec9bce924729d6e6fa6613efd96af95750abcce5cc507b28

  • SHA512

    5f4507b372032d3ceedc6074c06e3e26686f98eec382af0f7361cd7ac6fd59170ed7e120c7a3dee7325aa3821675d5b9f6020ec799227e0ce7aec04b6e0093b5

  • SSDEEP

    768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATBApwp133EskmKsN33EskmKsKbUA:CTW7JJZENTBAOIfmKJfmKh

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      bcd59645a2f6c673ec9bce924729d6e6fa6613efd96af95750abcce5cc507b28N.exe

    • Size

      35KB

    • MD5

      ef12a8b2dbc601336c76b69823035dd0

    • SHA1

      48ed2da0c77210d18462d7b5437bd68f78827c4d

    • SHA256

      bcd59645a2f6c673ec9bce924729d6e6fa6613efd96af95750abcce5cc507b28

    • SHA512

      5f4507b372032d3ceedc6074c06e3e26686f98eec382af0f7361cd7ac6fd59170ed7e120c7a3dee7325aa3821675d5b9f6020ec799227e0ce7aec04b6e0093b5

    • SSDEEP

      768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATBApwp133EskmKsN33EskmKsKbUA:CTW7JJZENTBAOIfmKJfmKh

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (2727) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks