Overview

overview

9

Static

static

5

9138fb4aaf...2N.exe

windows7-x64

9

9138fb4aaf...2N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9138fb4aaff31208b9f95de4b0bbee927b4d71825748e0ee31ba72eb878d3f62N.exe

  • Size

    385KB

  • Sample

    250111-zxg13sskaj

  • MD5

    09134e8a00b5f7957b4079802d0d2540

  • SHA1

    e04c654cc0afd52b9a3f3f0d3ba78e66e5f03d62

  • SHA256

    9138fb4aaff31208b9f95de4b0bbee927b4d71825748e0ee31ba72eb878d3f62

  • SHA512

    223c0cedb850d55a0f00b6c301ba8119952890a8440b9ebfc7326288d293a72f324e71c431c08aff985b239eed6da1b36e40387e1864389315cf1b3c966db740

  • SSDEEP

    6144:KbEyyj2yAIJbIjNDv0bNXkbvLiP+Eyyj2yAIJbIjNDv0bNXkbvLiPR:WyAUbIZGNXkbvLpyAUbIZGNXkbvLA

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      9138fb4aaff31208b9f95de4b0bbee927b4d71825748e0ee31ba72eb878d3f62N.exe

    • Size

      385KB

    • MD5

      09134e8a00b5f7957b4079802d0d2540

    • SHA1

      e04c654cc0afd52b9a3f3f0d3ba78e66e5f03d62

    • SHA256

      9138fb4aaff31208b9f95de4b0bbee927b4d71825748e0ee31ba72eb878d3f62

    • SHA512

      223c0cedb850d55a0f00b6c301ba8119952890a8440b9ebfc7326288d293a72f324e71c431c08aff985b239eed6da1b36e40387e1864389315cf1b3c966db740

    • SSDEEP

      6144:KbEyyj2yAIJbIjNDv0bNXkbvLiP+Eyyj2yAIJbIjNDv0bNXkbvLiPR:WyAUbIZGNXkbvLpyAUbIZGNXkbvLA

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (2047) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks