Overview

overview

9

Static

static

5

18f1e5daba...00.exe

windows7-x64

9

18f1e5daba...00.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    18f1e5daba95fc4fec6575a47a18ec4d09cf1c0b2a8ee8ef68231b582e54ca00.exe

  • Size

    209KB

  • Sample

    250111-2ba2rasmfz

  • MD5

    92bd269cc41e1ab20db38a0628d5ff14

  • SHA1

    863b16ba4e97373fb691d15ac18b48bf3a6fe634

  • SHA256

    18f1e5daba95fc4fec6575a47a18ec4d09cf1c0b2a8ee8ef68231b582e54ca00

  • SHA512

    bf3abb5f30b9bd2d4cb31aa1835d3c93606d79634b4c4af324e727b9e91c7df53ad6a74422e3f4444b80097d2ffdd5cf1c9fc24b1e3e83c738bb2555fc1bf0c4

  • SSDEEP

    3072:fny1tEyyj2yAeCgjJQWHIjN3tj6qnv0b2UrXkbvLiPI:KbEyyj2yAIJbIjNDv0bNXkbvLiPI

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      18f1e5daba95fc4fec6575a47a18ec4d09cf1c0b2a8ee8ef68231b582e54ca00.exe

    • Size

      209KB

    • MD5

      92bd269cc41e1ab20db38a0628d5ff14

    • SHA1

      863b16ba4e97373fb691d15ac18b48bf3a6fe634

    • SHA256

      18f1e5daba95fc4fec6575a47a18ec4d09cf1c0b2a8ee8ef68231b582e54ca00

    • SHA512

      bf3abb5f30b9bd2d4cb31aa1835d3c93606d79634b4c4af324e727b9e91c7df53ad6a74422e3f4444b80097d2ffdd5cf1c9fc24b1e3e83c738bb2555fc1bf0c4

    • SSDEEP

      3072:fny1tEyyj2yAeCgjJQWHIjN3tj6qnv0b2UrXkbvLiPI:KbEyyj2yAIJbIjNDv0bNXkbvLiPI

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (2695) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks