4e33ae49c622b74926f22455de745381f5bff13d9560308d7d53c5ef3b86c78a | Triage

Submit
Reports

Overview

overview

9

Static

static

5

4e33ae49c6...8a.exe

windows7-x64

9

4e33ae49c6...8a.exe

windows10-2004-x64

9

Sharing

General

Target

4e33ae49c622b74926f22455de745381f5bff13d9560308d7d53c5ef3b86c78a
Size

52KB
Sample

241011-1fnb7svfkf
MD5

0e5167b8f4e92469fd83c6e30c6b4c37
SHA1

605f3771eddae8e59d0dcbe853386f68b59707c9
SHA256

4e33ae49c622b74926f22455de745381f5bff13d9560308d7d53c5ef3b86c78a
SHA512

000800c3ec3e3d33b0514521b866e793755571721a101781ec2de6e968354fa07a190fb2e3bcc5c2c17a43e30fc60baf99917dec84dd524c9775a40878cb4c31
SSDEEP

768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9p:V7Zf/FAxTWoJJ7Tz

Score

9^/10

discovery ransomware upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

4e33ae49c622b74926f22455de745381f5bff13d9560308d7d53c5ef3b86c78a.exe

Resource

win7-20240903-en

discovery ransomware upx

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

4e33ae49c622b74926f22455de745381f5bff13d9560308d7d53c5ef3b86c78a.exe

Resource

win10v2004-20241007-en

discovery ransomware upx

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  4e33ae49c622b74926f22455de745381f5bff13d9560308d7d53c5ef3b86c78a
- Size
  
  52KB
- MD5
  
  0e5167b8f4e92469fd83c6e30c6b4c37
- SHA1
  
  605f3771eddae8e59d0dcbe853386f68b59707c9
- SHA256
  
  4e33ae49c622b74926f22455de745381f5bff13d9560308d7d53c5ef3b86c78a
- SHA512
  
  000800c3ec3e3d33b0514521b866e793755571721a101781ec2de6e968354fa07a190fb2e3bcc5c2c17a43e30fc60baf99917dec84dd524c9775a40878cb4c31
- SSDEEP
  
  768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9p:V7Zf/FAxTWoJJ7Tz
Score

9^/10

discovery ransomware upx
- Renames multiple (3751) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomwareupx

behavioral2

discoveryransomwareupx

© 2018-2025

Terms | Privacy