Managed XDR

c-windows-u87bqsqm.exe (ALPHV) — malware analysis report

File info

Filename
c-windows-u87bqsqm.exe
File type
PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
File size
2.9 MB
First seen
Last seen

Environment

w10/x86 en

Hashes

SHA1
ab96a3d9eb99d88addc0e2cc17c268a7bbddd2ed
SHA256
43cf4b7f697f309b1d736ced721d57f4e26c22cda3eee59e9d939bdc77deae27
MD5
3d4617a5a4ab1efb113a0b0b9b9c5574

Malwares

  • ALPHV

Signatures

Privilege Escalation

T1055 injection_failed: The attempt to inject into a process has failed

Defense Evasion

T1027.002 packer_entropy: Probably contains compressed or encrypted data
T1055 injection_failed: The attempt to inject into a process has failed

Other

yara_rules: Static rules
ce_info: Blackcat Configuration Data found
no_graphical_activity: No graphic activity
writes_data: Writes big amount of data to disk

Related reports

Managed XDR