Overview

overview

10

Static

static

10

af7eec6d32...31.exe

windows7-x64

9

af7eec6d32...31.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    af7eec6d320279b921e6ddd499055d2418352c0a41367bca037c32dac81a3a31

  • Size

    145KB

  • Sample

    240509-c9b92aec9w

  • MD5

    8d3fd510ecfb8a4fe1266fa96b935ca9

  • SHA1

    c84f8f5a8045d4bdab49546f066a9f6bbbbb07b2

  • SHA256

    af7eec6d320279b921e6ddd499055d2418352c0a41367bca037c32dac81a3a31

  • SHA512

    fd5198ff3f661b08974cfabe02f32377c1bd20098a16ad8bc7ab526779c450eff2b2fa3d0e8fca48ecbaac761a2e023b7febb783df8a4da91ed020b8eadc5774

  • SSDEEP

    1536:CTWn1++PJHJXA/OsIZfzc3/Q1pkMJ+ZGtK1+ZGtKQNMdTajOtGtU1wAIuZAIuJz:KQSo1EZGtKgZGtK/PgtU1wAIuZAIuR

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      af7eec6d320279b921e6ddd499055d2418352c0a41367bca037c32dac81a3a31

    • Size

      145KB

    • MD5

      8d3fd510ecfb8a4fe1266fa96b935ca9

    • SHA1

      c84f8f5a8045d4bdab49546f066a9f6bbbbb07b2

    • SHA256

      af7eec6d320279b921e6ddd499055d2418352c0a41367bca037c32dac81a3a31

    • SHA512

      fd5198ff3f661b08974cfabe02f32377c1bd20098a16ad8bc7ab526779c450eff2b2fa3d0e8fca48ecbaac761a2e023b7febb783df8a4da91ed020b8eadc5774

    • SSDEEP

      1536:CTWn1++PJHJXA/OsIZfzc3/Q1pkMJ+ZGtK1+ZGtKQNMdTajOtGtU1wAIuZAIuJz:KQSo1EZGtKgZGtK/PgtU1wAIuZAIuR

    Score
    9/10
    ransomwareupx

    • Renames multiple (196) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks