Overview

overview

9

Static

static

5

d33df2845e...c9.exe

windows7-x64

9

d33df2845e...c9.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d33df2845ec95e065345d8b126d464ebbbd683d3f3863e3e339369ad102158c9.exe

  • Size

    207KB

  • Sample

    241119-s41nfasnhq

  • MD5

    06127decdf8f4b2517dabe142b1be7cd

  • SHA1

    c21399f509383574f2a7f634b48e7cbe8904f45e

  • SHA256

    d33df2845ec95e065345d8b126d464ebbbd683d3f3863e3e339369ad102158c9

  • SHA512

    1b8a09a9c831dd2b7a55e354bedabd04dc1b0369893827694f1545f0fb8fe304831775ab61c6ab44c65957d33bcd5f8e74cd0767d66f230fc9cc3095fbafb141

  • SSDEEP

    1536:CTW7JJZENTBHfiP3zOBBBCCat/yOCaPonY/LzbqY/zRxUf:htEhBBBO/L/3V/zPUf

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      d33df2845ec95e065345d8b126d464ebbbd683d3f3863e3e339369ad102158c9.exe

    • Size

      207KB

    • MD5

      06127decdf8f4b2517dabe142b1be7cd

    • SHA1

      c21399f509383574f2a7f634b48e7cbe8904f45e

    • SHA256

      d33df2845ec95e065345d8b126d464ebbbd683d3f3863e3e339369ad102158c9

    • SHA512

      1b8a09a9c831dd2b7a55e354bedabd04dc1b0369893827694f1545f0fb8fe304831775ab61c6ab44c65957d33bcd5f8e74cd0767d66f230fc9cc3095fbafb141

    • SSDEEP

      1536:CTW7JJZENTBHfiP3zOBBBCCat/yOCaPonY/LzbqY/zRxUf:htEhBBBO/L/3V/zPUf

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (1977) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks