Overview

overview

10

Static

static

10

fa73e0e41a...03.exe

windows7-x64

9

fa73e0e41a...03.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    fa73e0e41a45a93f202565e0f51c19aaa0275fb4b60753bc56d02a0d7cfffa03

  • Size

    122KB

  • Sample

    240420-fr5emshc59

  • MD5

    169dab63cc8b5b88788ad8e3d513ef5c

  • SHA1

    2933ad4563fde5b49f963480cfafc50c85d7e571

  • SHA256

    fa73e0e41a45a93f202565e0f51c19aaa0275fb4b60753bc56d02a0d7cfffa03

  • SHA512

    68bb0369b524cc4cfc3b7a425589789cf312b4b151ccc66c2eec29e01c3556f40aa23dcd43ebc962dc4dbd07e90ab0090652c7c4d586dd5318b58926f4f09b9c

  • SSDEEP

    1536:67Zf/FAlsM1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCU:+nymCAIuZAIuYSMjoqtMHfhf5SskA

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      fa73e0e41a45a93f202565e0f51c19aaa0275fb4b60753bc56d02a0d7cfffa03

    • Size

      122KB

    • MD5

      169dab63cc8b5b88788ad8e3d513ef5c

    • SHA1

      2933ad4563fde5b49f963480cfafc50c85d7e571

    • SHA256

      fa73e0e41a45a93f202565e0f51c19aaa0275fb4b60753bc56d02a0d7cfffa03

    • SHA512

      68bb0369b524cc4cfc3b7a425589789cf312b4b151ccc66c2eec29e01c3556f40aa23dcd43ebc962dc4dbd07e90ab0090652c7c4d586dd5318b58926f4f09b9c

    • SSDEEP

      1536:67Zf/FAlsM1++PJHJXFAIuZAIuekc9zBfA1OjBWgOI3uicwa+shcBEN2iqxtdSCU:+nymCAIuZAIuYSMjoqtMHfhf5SskA

    Score
    9/10
    ransomwareupx

    • Renames multiple (595) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks