Overview

overview

9

Static

static

5

c0957525c6...9c.exe

windows7-x64

9

c0957525c6...9c.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c0957525c676f19621f4ac53a94491a2be4d2fc090ea52e57ab8fcc55994119c

  • Size

    22KB

  • Sample

    241120-dxr1dszhmr

  • MD5

    2653283220f595118443fe6a4fd5d687

  • SHA1

    a54102fe0279590f68e044c542746401456be2ba

  • SHA256

    c0957525c676f19621f4ac53a94491a2be4d2fc090ea52e57ab8fcc55994119c

  • SHA512

    262841e8123f952b07ca561f5eea5bd6405f32830e9b4f9fc9fc969555800fac18948a73f1740b0d4893c1c906ba4f0a46d539629600e447b41767dfb9da93bd

  • SSDEEP

    384:QOlIBXDaU7CPKK0TIhfJJcbQbf1Oti1JGBQOOiQJhAT17JqGmGI:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJR

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      c0957525c676f19621f4ac53a94491a2be4d2fc090ea52e57ab8fcc55994119c

    • Size

      22KB

    • MD5

      2653283220f595118443fe6a4fd5d687

    • SHA1

      a54102fe0279590f68e044c542746401456be2ba

    • SHA256

      c0957525c676f19621f4ac53a94491a2be4d2fc090ea52e57ab8fcc55994119c

    • SHA512

      262841e8123f952b07ca561f5eea5bd6405f32830e9b4f9fc9fc969555800fac18948a73f1740b0d4893c1c906ba4f0a46d539629600e447b41767dfb9da93bd

    • SSDEEP

      384:QOlIBXDaU7CPKK0TIhfJJcbQbf1Oti1JGBQOOiQJhAT17JqGmGI:kBT37CPKKdJJcbQbf1Oti1JGBQOOiQJR

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (1408) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks