Overview

overview

9

Static

static

7

0f8784ebbd...AS.exe

windows7-x64

9

0f8784ebbd...AS.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0f8784ebbd1c6e80fc604963a0702c20_NEAS

  • Size

    145KB

  • Sample

    240507-kkn7asbf72

  • MD5

    0f8784ebbd1c6e80fc604963a0702c20

  • SHA1

    4952f5a5f881e95f7760ee67df317ee143f04bf0

  • SHA256

    1edc69b52ab8d67094a7dba0447af3f9267ef02768a8e3038792e2e8fce3b227

  • SHA512

    bb19d3ca4d1c06ab020ed1d10ad5781aaae528e6dc4ea4a4a6cf18e43f077498b7ec40e0dba44171a1f91e9e88c8fcecc519bceea1d38b1e85861d3a5e51b9d5

  • SSDEEP

    1536:CTWn1++PJHJXA/OsIZfzc3/Q1pkMJ+ZGtK1+ZGtKQNMdTajOtGtU1wAIuZAIuJS8:KQSo1EZGtKgZGtK/PgtU1wAIuZAIu0bQ

Score
9/10
ransomwareupx

Malware Config

Targets

    • Target

      0f8784ebbd1c6e80fc604963a0702c20_NEAS

    • Size

      145KB

    • MD5

      0f8784ebbd1c6e80fc604963a0702c20

    • SHA1

      4952f5a5f881e95f7760ee67df317ee143f04bf0

    • SHA256

      1edc69b52ab8d67094a7dba0447af3f9267ef02768a8e3038792e2e8fce3b227

    • SHA512

      bb19d3ca4d1c06ab020ed1d10ad5781aaae528e6dc4ea4a4a6cf18e43f077498b7ec40e0dba44171a1f91e9e88c8fcecc519bceea1d38b1e85861d3a5e51b9d5

    • SSDEEP

      1536:CTWn1++PJHJXA/OsIZfzc3/Q1pkMJ+ZGtK1+ZGtKQNMdTajOtGtU1wAIuZAIuJS8:KQSo1EZGtKgZGtK/PgtU1wAIuZAIu0bQ

    Score
    9/10
    ransomwareupx

    • Renames multiple (3430) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks