Overview

overview

9

Static

static

7

0f06440a3d...cf.exe

windows7-x64

9

0f06440a3d...cf.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0f06440a3d0e6dc5227f25da8e8145cf.exe

  • Size

    252KB

  • Sample

    240426-me3tlsed4v

  • MD5

    0f06440a3d0e6dc5227f25da8e8145cf

  • SHA1

    56e7a7eb1e1b03e6d00a13f53f0a2bb41f3ffc71

  • SHA256

    2150bb1605d24d876b24671ff6a4102a18940f8afee7f5883d1e107bc7f6195e

  • SHA512

    5361989e0733a6ac5e08600733d6697f22efe9f96974d2fccdab8f0f9fe0bbaf4350ee3bc9604c66f455635d9d38d27b2c9b5912b81f43d42492b3c0a13e3b82

  • SSDEEP

    3072:+nymCAIuZAIuYSMjoqtMHfhflixiDfAIuZAIuYSMjoqtMHfhflixiZ:JmCAIuZAIuDMVtM/tfAIuZAIuDMVtM/j

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      0f06440a3d0e6dc5227f25da8e8145cf.exe

    • Size

      252KB

    • MD5

      0f06440a3d0e6dc5227f25da8e8145cf

    • SHA1

      56e7a7eb1e1b03e6d00a13f53f0a2bb41f3ffc71

    • SHA256

      2150bb1605d24d876b24671ff6a4102a18940f8afee7f5883d1e107bc7f6195e

    • SHA512

      5361989e0733a6ac5e08600733d6697f22efe9f96974d2fccdab8f0f9fe0bbaf4350ee3bc9604c66f455635d9d38d27b2c9b5912b81f43d42492b3c0a13e3b82

    • SSDEEP

      3072:+nymCAIuZAIuYSMjoqtMHfhflixiDfAIuZAIuYSMjoqtMHfhflixiZ:JmCAIuZAIuDMVtM/tfAIuZAIuDMVtM/j

    Score
    9/10
    ransomwareupx

    • Renames multiple (367) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks