Overview

overview

10

Static

static

10

3f802b5037...19.exe

windows7-x64

9

3f802b5037...19.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3f802b5037e7f07b8bb873e800597b965d9e40d09813621e6b53fcaf331f6519

  • Size

    246KB

  • Sample

    240510-zesd4abf39

  • MD5

    6277d6d44295404bea73fad02f8e33ff

  • SHA1

    a944b69f45361c9c369fb20e114f33445872bdf1

  • SHA256

    3f802b5037e7f07b8bb873e800597b965d9e40d09813621e6b53fcaf331f6519

  • SHA512

    ca68e1e8b87c850a5f55c0af92ecc8b61ced905f7f67b0162bdc9999647e6ec86329c58b61e84a1943157284f842bc42635e450a064f214f2adab74dfbb34574

  • SSDEEP

    6144:JmCAIuZAIuDMVtM/XSpfAIuZAIuDMVtM/XS9:7AIuZAIuOYSBAIuZAIuOYS9

Score
10/10
ransomwareupx

Malware Config

Targets

    • Target

      3f802b5037e7f07b8bb873e800597b965d9e40d09813621e6b53fcaf331f6519

    • Size

      246KB

    • MD5

      6277d6d44295404bea73fad02f8e33ff

    • SHA1

      a944b69f45361c9c369fb20e114f33445872bdf1

    • SHA256

      3f802b5037e7f07b8bb873e800597b965d9e40d09813621e6b53fcaf331f6519

    • SHA512

      ca68e1e8b87c850a5f55c0af92ecc8b61ced905f7f67b0162bdc9999647e6ec86329c58b61e84a1943157284f842bc42635e450a064f214f2adab74dfbb34574

    • SSDEEP

      6144:JmCAIuZAIuDMVtM/XSpfAIuZAIuDMVtM/XS9:7AIuZAIuOYSBAIuZAIuOYS9

    Score
    9/10
    ransomwareupx

    • Renames multiple (2710) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks