Overview

overview

9

Static

static

5

8ecdc1a98e...7N.exe

windows7-x64

9

8ecdc1a98e...7N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8ecdc1a98eeb8a07b6b1ab22c08d8f360b2c3dd141ecf9f8b781660a3c017567N.exe

  • Size

    209KB

  • Sample

    250120-k2en7asjfr

  • MD5

    4088c7c7dc7c8f0ba5497ceb9cabd690

  • SHA1

    79ee0a4d36b3714bba4a57ae6d3e9cbe3f0dd9d5

  • SHA256

    8ecdc1a98eeb8a07b6b1ab22c08d8f360b2c3dd141ecf9f8b781660a3c017567

  • SHA512

    dd45562a04b8832fb2146e9bef56894c1632069f9f7006900939a5d335c52c7bbea205a70845baac099a96fd34ef52ef9d6ad4dbd038bcc0815f2589b95f74fb

  • SSDEEP

    3072:fny1tEyyj2yAeCgjJQWHIjN3tj6qnv0b2UrXkbvLiPB:KbEyyj2yAIJbIjNDv0bNXkbvLiPB

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      8ecdc1a98eeb8a07b6b1ab22c08d8f360b2c3dd141ecf9f8b781660a3c017567N.exe

    • Size

      209KB

    • MD5

      4088c7c7dc7c8f0ba5497ceb9cabd690

    • SHA1

      79ee0a4d36b3714bba4a57ae6d3e9cbe3f0dd9d5

    • SHA256

      8ecdc1a98eeb8a07b6b1ab22c08d8f360b2c3dd141ecf9f8b781660a3c017567

    • SHA512

      dd45562a04b8832fb2146e9bef56894c1632069f9f7006900939a5d335c52c7bbea205a70845baac099a96fd34ef52ef9d6ad4dbd038bcc0815f2589b95f74fb

    • SSDEEP

      3072:fny1tEyyj2yAeCgjJQWHIjN3tj6qnv0b2UrXkbvLiPB:KbEyyj2yAIJbIjNDv0bNXkbvLiPB

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (2695) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks