Overview

overview

9

Static

static

5

2b79aca6d1...4N.exe

windows7-x64

9

2b79aca6d1...4N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2b79aca6d19d1c3209344295d5a2b11b6f2b86ab2dc362d76865b677848174f4N

  • Size

    41KB

  • Sample

    241012-rm83tavcqe

  • MD5

    1ec3717d6c4a986c31781a02554ffd70

  • SHA1

    a65a6a1fa4520dbe9bf6bb5c4d27595804ee5fe9

  • SHA256

    2b79aca6d19d1c3209344295d5a2b11b6f2b86ab2dc362d76865b677848174f4

  • SHA512

    d730431ed4446551c053445ea5abac27c857a56d4839eb3ac6acb06ede00be505523a143756a1e44430a2f1ac5eebcd17533458d7a0eb8e70416965a4b717644

  • SSDEEP

    768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9DfzTV1Z13:CTW7JJ7TFfzTV1Z13

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      2b79aca6d19d1c3209344295d5a2b11b6f2b86ab2dc362d76865b677848174f4N

    • Size

      41KB

    • MD5

      1ec3717d6c4a986c31781a02554ffd70

    • SHA1

      a65a6a1fa4520dbe9bf6bb5c4d27595804ee5fe9

    • SHA256

      2b79aca6d19d1c3209344295d5a2b11b6f2b86ab2dc362d76865b677848174f4

    • SHA512

      d730431ed4446551c053445ea5abac27c857a56d4839eb3ac6acb06ede00be505523a143756a1e44430a2f1ac5eebcd17533458d7a0eb8e70416965a4b717644

    • SSDEEP

      768:kBT37CPKKdJJ1EXBwzEXBwdcMcI9DfzTV1Z13:CTW7JJ7TFfzTV1Z13

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3250) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks