Overview

overview

9

Static

static

5

edb8018bf4...a8.exe

windows7-x64

9

edb8018bf4...a8.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    edb8018bf47fd8aa3bb8c7067dcf2f5e0ec2c585e6f3054b7218a8036278f5a8

  • Size

    80KB

  • Sample

    241121-nbg86s1qct

  • MD5

    59395313dd3d5e306907f5014f61f7bd

  • SHA1

    86dab9ec8e0e8db7c48b12f612a63687770bc156

  • SHA256

    edb8018bf47fd8aa3bb8c7067dcf2f5e0ec2c585e6f3054b7218a8036278f5a8

  • SHA512

    45deeb42f5fa8abfcd8989aa814a9fcffb7146a7c64e064ac29a2d5482f4e9d7a7f9a3fecaebbeecaaab4037b33eb2761afa6888ad9939fa20878875d124e613

  • SSDEEP

    768:a7BlpyqaFAK65euBT37CPKKDm7UEXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2W:a7ZyqaFAxTW8iVRRNRR3EBbAjEkjEE

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      edb8018bf47fd8aa3bb8c7067dcf2f5e0ec2c585e6f3054b7218a8036278f5a8

    • Size

      80KB

    • MD5

      59395313dd3d5e306907f5014f61f7bd

    • SHA1

      86dab9ec8e0e8db7c48b12f612a63687770bc156

    • SHA256

      edb8018bf47fd8aa3bb8c7067dcf2f5e0ec2c585e6f3054b7218a8036278f5a8

    • SHA512

      45deeb42f5fa8abfcd8989aa814a9fcffb7146a7c64e064ac29a2d5482f4e9d7a7f9a3fecaebbeecaaab4037b33eb2761afa6888ad9939fa20878875d124e613

    • SSDEEP

      768:a7BlpyqaFAK65euBT37CPKKDm7UEXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2W:a7ZyqaFAxTW8iVRRNRR3EBbAjEkjEE

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (655) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks