Overview

overview

9

Static

static

5

1199468fec...b5.exe

windows7-x64

9

1199468fec...b5.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1199468fecdd5385d3aa872bedf7aa54d4e668ef29a80f5bc7850e2b3076c3b5.exe

  • Size

    196KB

  • Sample

    250111-1zmj1stqbr

  • MD5

    74e7afa2dc6387f780267b506770a061

  • SHA1

    a0dbcb3660d837ad8bb617396f15109797909eeb

  • SHA256

    1199468fecdd5385d3aa872bedf7aa54d4e668ef29a80f5bc7850e2b3076c3b5

  • SHA512

    633f2a9e95042284254492fe0ab1e879b46731115b27d68838a4a7cdd2b294c20ba3ac2f146a33a459ff8dbf5c17c0a81e339a9fe7af40ba2a43571f4c1cce55

  • SSDEEP

    3072:fny1tEyyj2yAeCgjJRDFDqratEyyj2yAeCgjJRDFDqrT:KbEyyj2yAIJ7Eyyj2yAIJA

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      1199468fecdd5385d3aa872bedf7aa54d4e668ef29a80f5bc7850e2b3076c3b5.exe

    • Size

      196KB

    • MD5

      74e7afa2dc6387f780267b506770a061

    • SHA1

      a0dbcb3660d837ad8bb617396f15109797909eeb

    • SHA256

      1199468fecdd5385d3aa872bedf7aa54d4e668ef29a80f5bc7850e2b3076c3b5

    • SHA512

      633f2a9e95042284254492fe0ab1e879b46731115b27d68838a4a7cdd2b294c20ba3ac2f146a33a459ff8dbf5c17c0a81e339a9fe7af40ba2a43571f4c1cce55

    • SSDEEP

      3072:fny1tEyyj2yAeCgjJRDFDqratEyyj2yAeCgjJRDFDqrT:KbEyyj2yAIJ7Eyyj2yAIJA

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (228) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks