Overview

overview

9

Static

static

5

0e5248d959...61.exe

windows7-x64

9

0e5248d959...61.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0e5248d959a16bfa3daaff1dc9fac8c58a63f3627210a1c527e68c79044d0f61.exe

  • Size

    204KB

  • Sample

    250111-1zvwdstqdj

  • MD5

    1a296e047ceefb32186f0898e1df51cc

  • SHA1

    d4963f567aeaef91436456e96cf5741b8650a541

  • SHA256

    0e5248d959a16bfa3daaff1dc9fac8c58a63f3627210a1c527e68c79044d0f61

  • SHA512

    84670e8e01e5132772acaa4ba0ff8ce72e7b9bceb69a3e1452fa4015c333b491d5b8449afc6b8fe6d802c11ac309c8ef7594afc7e25440ad7d09eaed3bce6f2a

  • SSDEEP

    3072:fny1tEyyj2yAeCgjJQWHIjN3tj6qnv0b2UrXkbvLiPI:KbEyyj2yAIJbIjNDv0bNXkbvLiPI

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      0e5248d959a16bfa3daaff1dc9fac8c58a63f3627210a1c527e68c79044d0f61.exe

    • Size

      204KB

    • MD5

      1a296e047ceefb32186f0898e1df51cc

    • SHA1

      d4963f567aeaef91436456e96cf5741b8650a541

    • SHA256

      0e5248d959a16bfa3daaff1dc9fac8c58a63f3627210a1c527e68c79044d0f61

    • SHA512

      84670e8e01e5132772acaa4ba0ff8ce72e7b9bceb69a3e1452fa4015c333b491d5b8449afc6b8fe6d802c11ac309c8ef7594afc7e25440ad7d09eaed3bce6f2a

    • SSDEEP

      3072:fny1tEyyj2yAeCgjJQWHIjN3tj6qnv0b2UrXkbvLiPI:KbEyyj2yAIJbIjNDv0bNXkbvLiPI

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (2235) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks