Overview

overview

9

Static

static

5

4d27ed2d81...52.exe

windows7-x64

9

4d27ed2d81...52.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4d27ed2d8136c33e97a5dd83cf08a2ea82d72420a41009681f472721b3f5bf52.exe

  • Size

    65KB

  • Sample

    241121-ky3xlszfmf

  • MD5

    56ce46f9869e0c331498e3cfa95ddbe4

  • SHA1

    d2a53623ffcb434f2ce7a4ba42e488e9d39a0308

  • SHA256

    4d27ed2d8136c33e97a5dd83cf08a2ea82d72420a41009681f472721b3f5bf52

  • SHA512

    b719d58d9f3ebfbd9ca0076da018390a1d0c5aea14c5461bfb472a30aa9193562b97af13a2593a2dc9bf5dbb83115c1ee2e6420c19e55bec85fe69611076ab66

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9l2pqpK7o1LDdaNSf9Rio:V7Zf/FAxTWoJJ7TgwvLD

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      4d27ed2d8136c33e97a5dd83cf08a2ea82d72420a41009681f472721b3f5bf52.exe

    • Size

      65KB

    • MD5

      56ce46f9869e0c331498e3cfa95ddbe4

    • SHA1

      d2a53623ffcb434f2ce7a4ba42e488e9d39a0308

    • SHA256

      4d27ed2d8136c33e97a5dd83cf08a2ea82d72420a41009681f472721b3f5bf52

    • SHA512

      b719d58d9f3ebfbd9ca0076da018390a1d0c5aea14c5461bfb472a30aa9193562b97af13a2593a2dc9bf5dbb83115c1ee2e6420c19e55bec85fe69611076ab66

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9l2pqpK7o1LDdaNSf9Rio:V7Zf/FAxTWoJJ7TgwvLD

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3176) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks