Overview

overview

9

Static

static

5

6527ef3d97...8N.exe

windows7-x64

9

6527ef3d97...8N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6527ef3d974c65ef183845b78f99154d7a49763d38063a39fe563ebb4502f898N.exe

  • Size

    36KB

  • Sample

    241119-wtlcjszarg

  • MD5

    2f6da7ac9208fd87cc26f223173fc900

  • SHA1

    377b3d4e7c0482b9b2c73ecf699499303316a1e6

  • SHA256

    6527ef3d974c65ef183845b78f99154d7a49763d38063a39fe563ebb4502f898

  • SHA512

    91be5d3996dcef8e173d211fc51c7db579b07367eb9f1a0478813a50a0e42191874fb518bcd645d88b1e07eb25ad571ebc3f274a755b4f9b52fe8b3012aeb119

  • SSDEEP

    768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATBHfBo8o3PV15R5s:CTW7JJZENTBHfiP3zm

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      6527ef3d974c65ef183845b78f99154d7a49763d38063a39fe563ebb4502f898N.exe

    • Size

      36KB

    • MD5

      2f6da7ac9208fd87cc26f223173fc900

    • SHA1

      377b3d4e7c0482b9b2c73ecf699499303316a1e6

    • SHA256

      6527ef3d974c65ef183845b78f99154d7a49763d38063a39fe563ebb4502f898

    • SHA512

      91be5d3996dcef8e173d211fc51c7db579b07367eb9f1a0478813a50a0e42191874fb518bcd645d88b1e07eb25ad571ebc3f274a755b4f9b52fe8b3012aeb119

    • SSDEEP

      768:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJhATBHfBo8o3PV15R5s:CTW7JJZENTBHfiP3zm

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (2951) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks