Overview

overview

9

Static

static

5

3df5cadc95...7N.exe

windows7-x64

9

3df5cadc95...7N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    3df5cadc958c5bf312ff1c25c9b31f0ec4f2e2e9df834621c881b9f26d825cf7N

  • Size

    88KB

  • Sample

    241018-knd6hazfqr

  • MD5

    cdb0f75e3ce72a84ee67b339f74b90c0

  • SHA1

    262730361d718714ab2bb40520c7db8d16088f06

  • SHA256

    3df5cadc958c5bf312ff1c25c9b31f0ec4f2e2e9df834621c881b9f26d825cf7

  • SHA512

    66b03d1dd48d15626dc7028ec2de9a92655a523dd54d1468b6795d172a4cc220534f51267bcdee2f2848ddd72d2328a7cef72d0efb8e19b024d2a6b2a41b516c

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcwBcCBcw/tio/tiJFEFuodf:V7Zf/FAxTWoJJ7TTQoQPyPhehMmfm0bO

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      3df5cadc958c5bf312ff1c25c9b31f0ec4f2e2e9df834621c881b9f26d825cf7N

    • Size

      88KB

    • MD5

      cdb0f75e3ce72a84ee67b339f74b90c0

    • SHA1

      262730361d718714ab2bb40520c7db8d16088f06

    • SHA256

      3df5cadc958c5bf312ff1c25c9b31f0ec4f2e2e9df834621c881b9f26d825cf7

    • SHA512

      66b03d1dd48d15626dc7028ec2de9a92655a523dd54d1468b6795d172a4cc220534f51267bcdee2f2848ddd72d2328a7cef72d0efb8e19b024d2a6b2a41b516c

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcwBcCBcw/tio/tiJFEFuodf:V7Zf/FAxTWoJJ7TTQoQPyPhehMmfm0bO

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3224) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks