Overview

overview

9

Static

static

5

f8f2c911ec...0N.exe

windows7-x64

9

f8f2c911ec...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    f8f2c911ec95e3fca35db5d77defb89a21aff88fa218cd60ba4e2b90f38871b0N

  • Size

    160KB

  • Sample

    241003-f31wlawhlp

  • MD5

    09446f307d37b0c94809d36d34e037a0

  • SHA1

    28051e1adc54ae732a0b4ee02b359c36d7774754

  • SHA256

    f8f2c911ec95e3fca35db5d77defb89a21aff88fa218cd60ba4e2b90f38871b0

  • SHA512

    662c74f368a2dee123ce3f76120f5890487328589d86be90531cd24f8337021dc659c8ad55bc69d83af1717d836fef643b59864acdc7101fc4a8bd8dd37a7267

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zx4LgLrdqdDTWn1++PJHJXA/OsIZfzcn:fnyiQSoFcPdqdHQSoFcPdqdy

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      f8f2c911ec95e3fca35db5d77defb89a21aff88fa218cd60ba4e2b90f38871b0N

    • Size

      160KB

    • MD5

      09446f307d37b0c94809d36d34e037a0

    • SHA1

      28051e1adc54ae732a0b4ee02b359c36d7774754

    • SHA256

      f8f2c911ec95e3fca35db5d77defb89a21aff88fa218cd60ba4e2b90f38871b0

    • SHA512

      662c74f368a2dee123ce3f76120f5890487328589d86be90531cd24f8337021dc659c8ad55bc69d83af1717d836fef643b59864acdc7101fc4a8bd8dd37a7267

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zx4LgLrdqdDTWn1++PJHJXA/OsIZfzcn:fnyiQSoFcPdqdHQSoFcPdqdy

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (575) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks