Overview

overview

9

Static

static

7

8d67a9d6c8...AS.exe

windows7-x64

9

8d67a9d6c8...AS.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    8d67a9d6c83d866084a042f89cd12250_NEAS

  • Size

    144KB

  • Sample

    240507-h1vynsec4x

  • MD5

    8d67a9d6c83d866084a042f89cd12250

  • SHA1

    828ea10c9d3edb39293e6c0a093216f23f3e0e0d

  • SHA256

    c841cc95a2693e04dca64c4d53e7e3499ca06d32cca488c81a7f6eef765fe5c9

  • SHA512

    21c113e6d2dc68ca1b9d048f9328cbfd249fac493f282974bfa20dce8efe467cda654428df8e1d027af38c7e64bac1ace06e6a9b7c71f42b08663635c5b8606e

  • SSDEEP

    1536:CTWn1++PJHJXA/OsIZfzc3/Q1pkMJ+ZGtK1+ZGtKQNMdTajOtGtU1wAIuZAIuJR:KQSo1EZGtKgZGtK/PgtU1wAIuZAIu/

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      8d67a9d6c83d866084a042f89cd12250_NEAS

    • Size

      144KB

    • MD5

      8d67a9d6c83d866084a042f89cd12250

    • SHA1

      828ea10c9d3edb39293e6c0a093216f23f3e0e0d

    • SHA256

      c841cc95a2693e04dca64c4d53e7e3499ca06d32cca488c81a7f6eef765fe5c9

    • SHA512

      21c113e6d2dc68ca1b9d048f9328cbfd249fac493f282974bfa20dce8efe467cda654428df8e1d027af38c7e64bac1ace06e6a9b7c71f42b08663635c5b8606e

    • SSDEEP

      1536:CTWn1++PJHJXA/OsIZfzc3/Q1pkMJ+ZGtK1+ZGtKQNMdTajOtGtU1wAIuZAIuJR:KQSo1EZGtKgZGtK/PgtU1wAIuZAIu/

    Score
    9/10
    ransomwareupx

    • Renames multiple (3436) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks