Overview

overview

9

Static

static

5

be33194c4e...5c.exe

windows7-x64

9

be33194c4e...5c.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    be33194c4ee4586c536e9ab8d978021815eafdd36231dd4de1186bd3ec5bc85c

  • Size

    60KB

  • Sample

    241121-h5nedszlcz

  • MD5

    8277b65d3e0c37d1c5857776a7d8f2c6

  • SHA1

    0d4ef0603abfaf592a4bfc1385f3a5cb511ceea8

  • SHA256

    be33194c4ee4586c536e9ab8d978021815eafdd36231dd4de1186bd3ec5bc85c

  • SHA512

    9a006ee5d3ca1f534874cff906a6e45c147e4e062c52be40e628942f192cdae96dfff3a6c320cd5ed0338449c922aea197f056356f1b7b63d01515c50092a5fc

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATBHfBo8o3PV15Rn:V7Zf/FAxTWoJJZENTBHfiP3zemtjF

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      be33194c4ee4586c536e9ab8d978021815eafdd36231dd4de1186bd3ec5bc85c

    • Size

      60KB

    • MD5

      8277b65d3e0c37d1c5857776a7d8f2c6

    • SHA1

      0d4ef0603abfaf592a4bfc1385f3a5cb511ceea8

    • SHA256

      be33194c4ee4586c536e9ab8d978021815eafdd36231dd4de1186bd3ec5bc85c

    • SHA512

      9a006ee5d3ca1f534874cff906a6e45c147e4e062c52be40e628942f192cdae96dfff3a6c320cd5ed0338449c922aea197f056356f1b7b63d01515c50092a5fc

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATBHfBo8o3PV15Rn:V7Zf/FAxTWoJJZENTBHfiP3zemtjF

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3443) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks