Overview

overview

9

Static

static

5

2fa3c9ffd1...5b.exe

windows7-x64

9

2fa3c9ffd1...5b.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2fa3c9ffd1b5018f5f4fa28dd67aeefb3b0bd4e921abbb3757b9976e1f5dfb5b.exe

  • Size

    86KB

  • Sample

    250120-k4szlaskgm

  • MD5

    8f5c8015db87c61f0d6a17ae0fe3b08a

  • SHA1

    0902002c9fde58529304d0b84d30c59331d40e87

  • SHA256

    2fa3c9ffd1b5018f5f4fa28dd67aeefb3b0bd4e921abbb3757b9976e1f5dfb5b

  • SHA512

    d9632595d6e972a1bb3c1985a22c9c20acb403b12bc64900c7bddf8271c046c9b17ba326060c8dac153af80507bed33d0cab9217f1a36682f0ef00e8d47fd04b

  • SSDEEP

    768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcwBcCBcw/tio/ti3c7Fc7NH:V7Zf/FAxTWoJJ7TTQoQmoNC4CTPeP1

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      2fa3c9ffd1b5018f5f4fa28dd67aeefb3b0bd4e921abbb3757b9976e1f5dfb5b.exe

    • Size

      86KB

    • MD5

      8f5c8015db87c61f0d6a17ae0fe3b08a

    • SHA1

      0902002c9fde58529304d0b84d30c59331d40e87

    • SHA256

      2fa3c9ffd1b5018f5f4fa28dd67aeefb3b0bd4e921abbb3757b9976e1f5dfb5b

    • SHA512

      d9632595d6e972a1bb3c1985a22c9c20acb403b12bc64900c7bddf8271c046c9b17ba326060c8dac153af80507bed33d0cab9217f1a36682f0ef00e8d47fd04b

    • SSDEEP

      768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcwBcCBcw/tio/ti3c7Fc7NH:V7Zf/FAxTWoJJ7TTQoQmoNC4CTPeP1

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (3156) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks