Overview

overview

9

Static

static

5

4b25b0e18d...38.exe

windows7-x64

9

4b25b0e18d...38.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4b25b0e18d357e2b668ee41ddfdc524f4435ad2acf839474a49f8d5c14905638.exe

  • Size

    110KB

  • Sample

    250111-1kw5xatkar

  • MD5

    96cabeb4ecfca427a63e62045bb90001

  • SHA1

    204fe8171018fbcdf72c25aa11720afaabbd6466

  • SHA256

    4b25b0e18d357e2b668ee41ddfdc524f4435ad2acf839474a49f8d5c14905638

  • SHA512

    f0c61fa7f2a862a4a47243c7d5ebdb24c8147665381228836c995e16f079bbfa5f2807e40459b8799db4bfd425de4c9a4d49b549a1e117eeb8c9245c0f52e937

  • SSDEEP

    1536:V7Zf/FAxTWoJJZENTBmRPsdj2hkAeCgI3i0CJS1Il+lMwVBVw6aq6av:fny1tEyyj2yAeCgjJwVBVw6aq6av

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      4b25b0e18d357e2b668ee41ddfdc524f4435ad2acf839474a49f8d5c14905638.exe

    • Size

      110KB

    • MD5

      96cabeb4ecfca427a63e62045bb90001

    • SHA1

      204fe8171018fbcdf72c25aa11720afaabbd6466

    • SHA256

      4b25b0e18d357e2b668ee41ddfdc524f4435ad2acf839474a49f8d5c14905638

    • SHA512

      f0c61fa7f2a862a4a47243c7d5ebdb24c8147665381228836c995e16f079bbfa5f2807e40459b8799db4bfd425de4c9a4d49b549a1e117eeb8c9245c0f52e937

    • SSDEEP

      1536:V7Zf/FAxTWoJJZENTBmRPsdj2hkAeCgI3i0CJS1Il+lMwVBVw6aq6av:fny1tEyyj2yAeCgjJwVBVw6aq6av

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (2853) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks