Overview

overview

9

Static

static

5

1f9e8e4a98...8N.exe

windows7-x64

9

1f9e8e4a98...8N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    1f9e8e4a98e687b3105f3cfb575a792c033d53093d96830cc53b91b0a43ba9a8N

  • Size

    1.1MB

  • Sample

    241006-fbav4asgqr

  • MD5

    74d189954d3ccc558461bb6a7b000a10

  • SHA1

    81b8c26ea8184fb6f74cc096ea8d4da2b70512c8

  • SHA256

    1f9e8e4a98e687b3105f3cfb575a792c033d53093d96830cc53b91b0a43ba9a8

  • SHA512

    df3ce69f350f37f0aa671591b0e5fe66d27fa5672a137b56916457af942f571e52b1b6b03818d8849ef57dab84d030512aa6df928cb266f9efcaa503525a877c

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATNydWK9WKF9ADJX:V7Zf/FAxTWoJJZENTNyoKIKMR

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      1f9e8e4a98e687b3105f3cfb575a792c033d53093d96830cc53b91b0a43ba9a8N

    • Size

      1.1MB

    • MD5

      74d189954d3ccc558461bb6a7b000a10

    • SHA1

      81b8c26ea8184fb6f74cc096ea8d4da2b70512c8

    • SHA256

      1f9e8e4a98e687b3105f3cfb575a792c033d53093d96830cc53b91b0a43ba9a8

    • SHA512

      df3ce69f350f37f0aa671591b0e5fe66d27fa5672a137b56916457af942f571e52b1b6b03818d8849ef57dab84d030512aa6df928cb266f9efcaa503525a877c

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATNydWK9WKF9ADJX:V7Zf/FAxTWoJJZENTNyoKIKMR

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (470) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks