Overview

overview

9

Static

static

5

bfefbfca4f...20.exe

windows7-x64

9

bfefbfca4f...20.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    bfefbfca4f605dee9a3b0c770186d082264fdd58b26fd995d275cba907560f20

  • Size

    40KB

  • Sample

    241012-csk6lsxdnh

  • MD5

    59e149ef85cf8af4cda38c60fec154c7

  • SHA1

    7a13534a8772a6f6993cc1faa80a175f25572306

  • SHA256

    bfefbfca4f605dee9a3b0c770186d082264fdd58b26fd995d275cba907560f20

  • SHA512

    5b76f378f60d384b4a4e16cf542b8e500aa23811de7554d9e583e92ff501a7a11f84c01b6de4194397cbe3d4de0faed3cb984c54d2cf01e754521b95235f4433

  • SSDEEP

    768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATBHfBo8o3POTaGTa7:CTW7JJZENTBHfiPOTNTG

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      bfefbfca4f605dee9a3b0c770186d082264fdd58b26fd995d275cba907560f20

    • Size

      40KB

    • MD5

      59e149ef85cf8af4cda38c60fec154c7

    • SHA1

      7a13534a8772a6f6993cc1faa80a175f25572306

    • SHA256

      bfefbfca4f605dee9a3b0c770186d082264fdd58b26fd995d275cba907560f20

    • SHA512

      5b76f378f60d384b4a4e16cf542b8e500aa23811de7554d9e583e92ff501a7a11f84c01b6de4194397cbe3d4de0faed3cb984c54d2cf01e754521b95235f4433

    • SSDEEP

      768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATBHfBo8o3POTaGTa7:CTW7JJZENTBHfiPOTNTG

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3743) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks