Overview

overview

10

Static

static

528ef1d360...78.exe

windows7-x64

3

528ef1d360...78.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    528ef1d360ca91056dd002f788e425698a90d4e8090e45d74563252d55806378

  • Size

    63KB

  • Sample

    221205-gmq7wsbf22

  • MD5

    8f438f711f16f9d608257b56a34c181d

  • SHA1

    d8d889d977105b88c3d196df9aeb5a536115b22f

  • SHA256

    528ef1d360ca91056dd002f788e425698a90d4e8090e45d74563252d55806378

  • SHA512

    ea4753904d308b43e9e7cbc24f39ed62c017eaa8b40cab1b6b5c77f28d4d44079eb3fb6a9ef1e10a5e5dd317513afa9365de5651e405581378b8304071e988de

  • SSDEEP

    1536:ro4ZSwAQaNuveqgW61h9Ypm+4r6zPH3A6I8DVmclPCYnrEkG:rvBHageqgX1h3ifpI8DV3CYnrEf

Score
10/10
clopransomwareupx

Malware Config

Targets

    • Target

      528ef1d360ca91056dd002f788e425698a90d4e8090e45d74563252d55806378

    • Size

      63KB

    • MD5

      8f438f711f16f9d608257b56a34c181d

    • SHA1

      d8d889d977105b88c3d196df9aeb5a536115b22f

    • SHA256

      528ef1d360ca91056dd002f788e425698a90d4e8090e45d74563252d55806378

    • SHA512

      ea4753904d308b43e9e7cbc24f39ed62c017eaa8b40cab1b6b5c77f28d4d44079eb3fb6a9ef1e10a5e5dd317513afa9365de5651e405581378b8304071e988de

    • SSDEEP

      1536:ro4ZSwAQaNuveqgW61h9Ypm+4r6zPH3A6I8DVmclPCYnrEkG:rvBHageqgX1h3ifpI8DV3CYnrEf

    Score
    10/10
    clopransomwareupx

    • Clop

      Ransomware discovered in early 2019 which has been actively developed since release.

      ransomwareclop

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks