Overview

overview

9

Static

static

5

59a16aff8f...0N.exe

windows7-x64

9

59a16aff8f...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    59a16aff8fd7bcf2754486819258fae636589566ba1d727bc3fcc161f9e96af0N

  • Size

    83KB

  • Sample

    240930-wq725sydjp

  • MD5

    a43f6b61103eef3170b80a11bd76b3f0

  • SHA1

    785f5b64da5a8ea56e8d9d1188f4a63b52657de1

  • SHA256

    59a16aff8fd7bcf2754486819258fae636589566ba1d727bc3fcc161f9e96af0

  • SHA512

    ad2c67882fd88896c18a10e1228d489eb149c532c8cc51b8acbffa18bfb654f24637e2446e86502e5f07c85b9d85dbf6d022a634608e6d0fa2cb7fa39a7e5c57

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxY5C:fnyiQSox5C

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      59a16aff8fd7bcf2754486819258fae636589566ba1d727bc3fcc161f9e96af0N

    • Size

      83KB

    • MD5

      a43f6b61103eef3170b80a11bd76b3f0

    • SHA1

      785f5b64da5a8ea56e8d9d1188f4a63b52657de1

    • SHA256

      59a16aff8fd7bcf2754486819258fae636589566ba1d727bc3fcc161f9e96af0

    • SHA512

      ad2c67882fd88896c18a10e1228d489eb149c532c8cc51b8acbffa18bfb654f24637e2446e86502e5f07c85b9d85dbf6d022a634608e6d0fa2cb7fa39a7e5c57

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxY5C:fnyiQSox5C

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (335) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks