Overview

overview

9

Static

static

5

5cd8b4a049...9N.exe

windows7-x64

9

5cd8b4a049...9N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    5cd8b4a049b5404e1281606ac69fc92fe7cf49754553bf3809ae12e6476bb3b9N

  • Size

    36KB

  • Sample

    240928-dasneashqr

  • MD5

    ecd9d128c4bffad58a63583c73c6e9a0

  • SHA1

    5837e742e38e9973c6dce3a4187c5dea0066bf42

  • SHA256

    5cd8b4a049b5404e1281606ac69fc92fe7cf49754553bf3809ae12e6476bb3b9

  • SHA512

    d884cc333d62c681b626e7a77e649922a38e686eb37de7233dea8819048e004aa5fe49672bee0d245b542d7c9df274be4ebc373a6de09cc540b83cbae72b5725

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9Ro+QOViJfo+QOViJKs:CTW7JJ7TPU5s

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      5cd8b4a049b5404e1281606ac69fc92fe7cf49754553bf3809ae12e6476bb3b9N

    • Size

      36KB

    • MD5

      ecd9d128c4bffad58a63583c73c6e9a0

    • SHA1

      5837e742e38e9973c6dce3a4187c5dea0066bf42

    • SHA256

      5cd8b4a049b5404e1281606ac69fc92fe7cf49754553bf3809ae12e6476bb3b9

    • SHA512

      d884cc333d62c681b626e7a77e649922a38e686eb37de7233dea8819048e004aa5fe49672bee0d245b542d7c9df274be4ebc373a6de09cc540b83cbae72b5725

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9Ro+QOViJfo+QOViJKs:CTW7JJ7TPU5s

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (4044) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks