Overview

overview

9

Static

static

5

6e647edae6...d8.exe

windows7-x64

9

6e647edae6...d8.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    6e647edae662169184a7b53ea6a2e52a737739a8ba212d2c9b31b403323e94d8

  • Size

    89KB

  • Sample

    241005-2e76navdlk

  • MD5

    463f4207767128aff96cccbe9720d15c

  • SHA1

    d1ff2679b91e3bfe0da04ae3781ff9ceb73ab024

  • SHA256

    6e647edae662169184a7b53ea6a2e52a737739a8ba212d2c9b31b403323e94d8

  • SHA512

    a2f7ec812ff1014dd7e1f002d9b9979822277052e7a7caf39379053191910b42bd5f1cdcf62d6a427931bd733f0730e386bc9f42b5c7e54790799ea325f2dec6

  • SSDEEP

    1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxY5KwD:fnyiQSox5KwD

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      6e647edae662169184a7b53ea6a2e52a737739a8ba212d2c9b31b403323e94d8

    • Size

      89KB

    • MD5

      463f4207767128aff96cccbe9720d15c

    • SHA1

      d1ff2679b91e3bfe0da04ae3781ff9ceb73ab024

    • SHA256

      6e647edae662169184a7b53ea6a2e52a737739a8ba212d2c9b31b403323e94d8

    • SHA512

      a2f7ec812ff1014dd7e1f002d9b9979822277052e7a7caf39379053191910b42bd5f1cdcf62d6a427931bd733f0730e386bc9f42b5c7e54790799ea325f2dec6

    • SSDEEP

      1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxY5KwD:fnyiQSox5KwD

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (600) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks