Overview

overview

9

Static

static

5

60407a417d...cN.exe

windows7-x64

9

60407a417d...cN.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    60407a417d259276f569c3128ef3d4e8d6d9b1197f0e230d5e1adf7c7b651d2cN.exe

  • Size

    183KB

  • Sample

    250120-kzldys1qdw

  • MD5

    290e036375d560807af6d3db7e967f00

  • SHA1

    62a6000304357d2226b5dc3cba350191afde92e8

  • SHA256

    60407a417d259276f569c3128ef3d4e8d6d9b1197f0e230d5e1adf7c7b651d2c

  • SHA512

    410fb1ce3bffab52361ac84d0a0d130088b02fc82f9c4345fe6b59ccdd89a2a808a251fd12f659b5442239abc3f3008963c843d62ed5147635c8d22f1b69ab0e

  • SSDEEP

    3072:htEyyj2yAeCgjJQWHIjN3tj6qnv0b2UrXkbvLiPz:fEyyj2yAIJbIjNDv0bNXkbvLiPz

Score
9/10
discoveryransomwareupx

Malware Config

Targets

    • Target

      60407a417d259276f569c3128ef3d4e8d6d9b1197f0e230d5e1adf7c7b651d2cN.exe

    • Size

      183KB

    • MD5

      290e036375d560807af6d3db7e967f00

    • SHA1

      62a6000304357d2226b5dc3cba350191afde92e8

    • SHA256

      60407a417d259276f569c3128ef3d4e8d6d9b1197f0e230d5e1adf7c7b651d2c

    • SHA512

      410fb1ce3bffab52361ac84d0a0d130088b02fc82f9c4345fe6b59ccdd89a2a808a251fd12f659b5442239abc3f3008963c843d62ed5147635c8d22f1b69ab0e

    • SSDEEP

      3072:htEyyj2yAeCgjJQWHIjN3tj6qnv0b2UrXkbvLiPz:fEyyj2yAIJbIjNDv0bNXkbvLiPz

    Score
    9/10
    discoveryransomwareupx

    • Renames multiple (2722) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks