Overview

overview

10

Static

static

10

adba313f1b...04.exe

windows7-x64

9

adba313f1b...04.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    adba313f1b1a6dc56be8bb261371ef808a26472d020f300dabac2eef32742b04

  • Size

    191KB

  • Sample

    240425-ca921sdb86

  • MD5

    0aa8e42be65c1770d38bf7ae327f9629

  • SHA1

    06e9e8b6458f4df592da23587e16acad51572d5c

  • SHA256

    adba313f1b1a6dc56be8bb261371ef808a26472d020f300dabac2eef32742b04

  • SHA512

    6c23f28715acd9f7dd534313c456dbef58c17b1cf9891dbc069621a9e42a263361e9f49cd31f9ca511230589a0630e75989c1cba59a376f2b4e736c5dc2a29fa

  • SSDEEP

    3072:+nyiQSo1EZGtKgZGtK/PgtU1wAIuZAIu/:JiQSo1EZGtKgZGtK/CAIuZAIu/

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      adba313f1b1a6dc56be8bb261371ef808a26472d020f300dabac2eef32742b04

    • Size

      191KB

    • MD5

      0aa8e42be65c1770d38bf7ae327f9629

    • SHA1

      06e9e8b6458f4df592da23587e16acad51572d5c

    • SHA256

      adba313f1b1a6dc56be8bb261371ef808a26472d020f300dabac2eef32742b04

    • SHA512

      6c23f28715acd9f7dd534313c456dbef58c17b1cf9891dbc069621a9e42a263361e9f49cd31f9ca511230589a0630e75989c1cba59a376f2b4e736c5dc2a29fa

    • SSDEEP

      3072:+nyiQSo1EZGtKgZGtK/PgtU1wAIuZAIu/:JiQSo1EZGtKgZGtK/CAIuZAIu/

    Score
    9/10
    ransomwareupx

    • Renames multiple (3360) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks