Overview

overview

9

Static

static

5

0bacc25781...1N.exe

windows7-x64

9

0bacc25781...1N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0bacc2578103ce05f697eba4ba9d168924ac80172cf0bd2ff36d91f834f36fc1N.exe

  • Size

    101KB

  • Sample

    241121-j5vzxavkhl

  • MD5

    74a835c12cfe49dff9b0c227a07636b0

  • SHA1

    7d4389b48dde48f039ee715c2f1c69690d4208c2

  • SHA256

    0bacc2578103ce05f697eba4ba9d168924ac80172cf0bd2ff36d91f834f36fc1

  • SHA512

    68e1d709109ee646e9ef8db0c85fd7817d4dd0634fa72df74bb781d43fd420366950e2ba4541fcf00f0518849921707bde56271b719e81aeff9fdd44ff8f6de8

  • SSDEEP

    1536:V7Zf/FAxTWoJJZENTBHfiPRdgTW7JJZENTBHfiPRd2:fny1tEwtEt

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      0bacc2578103ce05f697eba4ba9d168924ac80172cf0bd2ff36d91f834f36fc1N.exe

    • Size

      101KB

    • MD5

      74a835c12cfe49dff9b0c227a07636b0

    • SHA1

      7d4389b48dde48f039ee715c2f1c69690d4208c2

    • SHA256

      0bacc2578103ce05f697eba4ba9d168924ac80172cf0bd2ff36d91f834f36fc1

    • SHA512

      68e1d709109ee646e9ef8db0c85fd7817d4dd0634fa72df74bb781d43fd420366950e2ba4541fcf00f0518849921707bde56271b719e81aeff9fdd44ff8f6de8

    • SSDEEP

      1536:V7Zf/FAxTWoJJZENTBHfiPRdgTW7JJZENTBHfiPRd2:fny1tEwtEt

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (2852) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks