Overview

overview

10

Static

static

10

cfe05862b1...17.exe

windows7-x64

9

cfe05862b1...17.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cfe05862b10a4a8be48dd40b38fb7b13f8a09cb3943efaf7b09d3826641c5c17

  • Size

    214KB

  • Sample

    240420-dkkqjsef63

  • MD5

    87535022f292f48d3c8352d62928cade

  • SHA1

    24334a6281554295609b142514a2329233249985

  • SHA256

    cfe05862b10a4a8be48dd40b38fb7b13f8a09cb3943efaf7b09d3826641c5c17

  • SHA512

    33241dda310be11d9b8b504248767169808bcec3f3f4d57aa534b08fabc90a8bd720084f3328944ec312cd0175da65313d9ae396cd3fd28be16d24fa5c593db1

  • SSDEEP

    3072:+nymCAIuZAIuYSMjoqtMHfhf9fAIuZAIuYSMjoqtMHfhfT:JmCAIuZAIuDMVtM/zfAIuZAIuDMVtM/l

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      cfe05862b10a4a8be48dd40b38fb7b13f8a09cb3943efaf7b09d3826641c5c17

    • Size

      214KB

    • MD5

      87535022f292f48d3c8352d62928cade

    • SHA1

      24334a6281554295609b142514a2329233249985

    • SHA256

      cfe05862b10a4a8be48dd40b38fb7b13f8a09cb3943efaf7b09d3826641c5c17

    • SHA512

      33241dda310be11d9b8b504248767169808bcec3f3f4d57aa534b08fabc90a8bd720084f3328944ec312cd0175da65313d9ae396cd3fd28be16d24fa5c593db1

    • SSDEEP

      3072:+nymCAIuZAIuYSMjoqtMHfhf9fAIuZAIuYSMjoqtMHfhfT:JmCAIuZAIuDMVtM/zfAIuZAIuDMVtM/l

    Score
    9/10
    ransomwareupx

    • Renames multiple (3104) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks